Логотип exploitDog
bind:"CVE-2020-11023" OR bind:"CVE-2020-7656"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2020-11023" OR bind:"CVE-2020-7656"

Количество 38

Количество 38

oracle-oval логотип

ELSA-2021-9552

больше 3 лет назад

ELSA-2021-9552: pcs security update (LOW)

EPSS: Низкий
ubuntu логотип

CVE-2020-7656

около 5 лет назад

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2020-7656

около 5 лет назад

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2020-7656

около 5 лет назад

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2020-7656

около 5 лет назад

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2020-11023

около 5 лет назад

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.9
EPSS: Средний
redhat логотип

CVE-2020-11023

около 5 лет назад

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.1
EPSS: Средний
nvd логотип

CVE-2020-11023

около 5 лет назад

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.9
EPSS: Средний
debian логотип

CVE-2020-11023

около 5 лет назад

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, pa ...

CVSS3: 6.9
EPSS: Средний
github логотип

GHSA-q4m3-2j7h-f7xw

около 5 лет назад

Cross-Site Scripting in jquery

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2023-07536

около 5 лет назад

Уязвимость библиотеки jQuery, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить межсайтовую сценарную атаку

CVSS3: 6.1
EPSS: Низкий
rocky логотип

RLSA-2025:1338

4 месяца назад

Moderate: gcc-toolset-14-gcc security update

EPSS: Средний
rocky логотип

RLSA-2025:1306

4 месяца назад

Moderate: gcc-toolset-13-gcc security update

EPSS: Средний
rocky логотип

RLSA-2025:1301

4 месяца назад

Moderate: gcc security update

EPSS: Средний
rocky логотип

RLSA-2025:1215

4 месяца назад

Moderate: tbb security update

EPSS: Средний
rocky логотип

RLSA-2021:1846

около 4 лет назад

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

EPSS: Средний
github логотип

GHSA-jpcq-cgw6-v4j6

около 5 лет назад

Potential XSS vulnerability in jQuery

CVSS3: 6.9
EPSS: Средний
oracle-oval логотип

ELSA-2025-1601

3 месяца назад

ELSA-2025-1601: gcc security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1346

4 месяца назад

ELSA-2025-1346: gcc security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1338

4 месяца назад

ELSA-2025-1338: gcc-toolset-14-gcc security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
oracle-oval логотип
ELSA-2021-9552

ELSA-2021-9552: pcs security update (LOW)

больше 3 лет назад
ubuntu логотип
CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 6.1
1%
Низкий
около 5 лет назад
redhat логотип
CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 5.4
1%
Низкий
около 5 лет назад
nvd логотип
CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS3: 6.1
1%
Низкий
около 5 лет назад
debian логотип
CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load ...

CVSS3: 6.1
1%
Низкий
около 5 лет назад
ubuntu логотип
CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.9
12%
Средний
около 5 лет назад
redhat логотип
CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.1
12%
Средний
около 5 лет назад
nvd логотип
CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS3: 6.9
12%
Средний
около 5 лет назад
debian логотип
CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, pa ...

CVSS3: 6.9
12%
Средний
около 5 лет назад
github логотип
GHSA-q4m3-2j7h-f7xw

Cross-Site Scripting in jquery

CVSS3: 6.1
1%
Низкий
около 5 лет назад
fstec логотип
BDU:2023-07536

Уязвимость библиотеки jQuery, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить межсайтовую сценарную атаку

CVSS3: 6.1
1%
Низкий
около 5 лет назад
rocky логотип
RLSA-2025:1338

Moderate: gcc-toolset-14-gcc security update

12%
Средний
4 месяца назад
rocky логотип
RLSA-2025:1306

Moderate: gcc-toolset-13-gcc security update

12%
Средний
4 месяца назад
rocky логотип
RLSA-2025:1301

Moderate: gcc security update

12%
Средний
4 месяца назад
rocky логотип
RLSA-2025:1215

Moderate: tbb security update

12%
Средний
4 месяца назад
rocky логотип
RLSA-2021:1846

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

12%
Средний
около 4 лет назад
github логотип
GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

CVSS3: 6.9
12%
Средний
около 5 лет назад
oracle-oval логотип
ELSA-2025-1601

ELSA-2025-1601: gcc security update (MODERATE)

3 месяца назад
oracle-oval логотип
ELSA-2025-1346

ELSA-2025-1346: gcc security update (MODERATE)

4 месяца назад
oracle-oval логотип
ELSA-2025-1338

ELSA-2025-1338: gcc-toolset-14-gcc security update (MODERATE)

4 месяца назад

Уязвимостей на страницу