CVE-2019-11358 vulnerabilities and exploits

(subscribe to this query)

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Jquery Jquery Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Drupal Drupal Backdropcms Backdrop Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Oncommand System Manager

486 Github repositories

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been remo...

An issue exists in Django 1.11 prior to 1.11.21, 2.1 prior to 2.1.9, and 2.2 prior to 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or...

Djangoproject Django

1 Github repository

A flaw was found in all ipa versions 4.x.x up to and including 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The ...

Red Hat Ipa Freeipa Freeipa Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0

In Bootstrap prior to 4.1.2, XSS is possible in the collapse data-parent attribute.

Debian Debian Linux 8.0 Getbootstrap Bootstrap Getbootstrap Bootstrap 4.0.0

2 Github repositories

In Bootstrap prior to 4.1.2, XSS is possible in the data-container property of tooltip.

Getbootstrap Bootstrap Getbootstrap Bootstrap 4.0.0

2 Github repositories

In Bootstrap prior to 3.4.0, XSS is possible in the tooltip data-viewport attribute.

Getbootstrap Bootstrap

In Bootstrap prior to 3.4.0, XSS is possible in the affix configuration target property.

Getbootstrap Bootstrap

1 Github repository

In Bootstrap prior to 3.4.1 and 4.3.x prior to 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Getbootstrap Bootstrap F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics F5 Big-ip Application Acceleration Manager F5 Big-ip Application Security Manager F5 Big-ip Domain Name System F5 Big-ip Edge Gateway F5 Big-ip Fraud Protection Service F5 Big-ip Global Traffic Manager F5 Big-ip Link Controller F5 Big-ip Local Traffic Manager

7 Github repositories

In Bootstrap 3.x prior to 3.4.0 and 4.x-beta prior to 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

Getbootstrap Bootstrap Getbootstrap Bootstrap 4.0.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook