CVE-2020-11022

CVE-2020-11022 affects jQuery versions >=1.2 and =3.5.0 or apply vendor guidance where applicable.

CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2020-2964

CVE-2020-2964 concerns Oracle Financial Services Data Foundation (Oracle Financial Services Applications) — User Interface component. Affected versions are 8.0.6–8.0.9. The vulnerability enables a low-privilege, unauthenticated attacker with network access via HTTP to compromise data, potentially...