Published: 20/04/2019 Updated: 16/02/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 412

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jquery jquery
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
drupal drupal
backdropcms backdrop
fedoraproject fedora 28
fedoraproject fedora 29
fedoraproject fedora 30
opensuse leap 15.1
opensuse backports sle 15.0
netapp snapcenter -
netapp oncommand system manager
redhat cloudforms 4.7
redhat virtualization manager 4.3
oracle service bus 12.1.3.0.0
oracle primavera unifier 16.2
oracle jd edwards enterpriseone tools 9.2
oracle weblogic server 12.1.3.0.0
oracle service bus 11.1.1.9.0
oracle jdeveloper 11.1.1.9.0
oracle primavera unifier 16.1
oracle application testing suite 12.5.0.3
oracle peoplesoft enterprise peopletools 8.55
oracle retail back office 14.1
oracle retail back office 14.0
oracle peoplesoft enterprise peopletools 8.56
oracle hospitality guest access 4.2.0
oracle hospitality guest access 4.2.1
oracle weblogic server 10.3.6.0.0
oracle communications webrtc session controller 7.2
oracle weblogic server 12.2.1.3.0
oracle financial services market risk measurement and management 8.0.5
oracle financial services liquidity risk management 8.0.5.0.0
oracle financial services liquidity risk management 8.0.4.0.0
oracle financial services liquidity risk management 8.0.0.1.0
oracle communications unified inventory management 7.3
oracle enterprise manager ops center 12.3.3
oracle agile product lifecycle management for process 6.2.0.0
oracle agile product lifecycle management for process 6.2.1.0
oracle webcenter sites 12.2.1.3.0
oracle business process management suite 12.2.1.3.0
oracle fusion middleware mapviewer 12.2.1.3.0
oracle peoplesoft enterprise peopletools 8.57
oracle identity manager 12.2.1.3.0
oracle application testing suite 13.1.0.1
oracle application testing suite 13.2.0.1
oracle application testing suite 13.3.0.1
oracle retail customer insights 15.0
oracle retail customer insights 16.0
oracle retail returns management 14.0
oracle retail returns management 14.1
oracle retail central office 14.0
oracle retail central office 14.1
oracle communications billing and revenue management 7.5
oracle communications billing and revenue management 12.0
oracle primavera unifier 18.8
oracle retail customer management and segmentation foundation 18.0
oracle jdeveloper 12.2.1.3.0
oracle bi publisher 12.2.1.4.0
oracle bi publisher 12.2.1.3.0
oracle retail point-of-service 14.1
oracle retail point-of-service 14.0
oracle policy automation connector for siebel 10.4.6
oracle policy automation 10.4.7
oracle policy automation 12.1.0
oracle policy automation 12.1.1
oracle communications operations monitor 3.4
oracle communications operations monitor 4.0
oracle service bus 12.2.1.3.0
oracle primavera unifier
oracle agile product lifecycle management for process 6.2.2.0
oracle agile product lifecycle management for process 6.2.3.0
oracle financial services market risk measurement and management 8.0.6
oracle financial services loan loss forecasting and provisioning
oracle financial services hedge management and ifrs valuations
oracle financial services funds transfer pricing
oracle financial services data integration hub
oracle financial services asset liability management
oracle financial services analytical applications infrastructure
oracle hospitality materials control 18.1
oracle healthcare translational research 3.1.0
oracle communications unified inventory management 7.4.0
oracle enterprise manager ops center 12.4.0
oracle application testing suite 13.3
oracle banking digital experience 18.2
oracle banking digital experience 18.3
oracle banking digital experience 19.1
oracle banking digital experience 18.1
oracle weblogic server 12.2.1.4.0
oracle knowledge
oracle peoplesoft enterprise peopletools 8.58
oracle financial services liquidity risk management 8.0.6
oracle financial services liquidity risk measurement and management 8.0.8
oracle financial services liquidity risk measurement and management 8.0.7
oracle financial services balance sheet planning 8.0.8
oracle application express
oracle weblogic server 14.1.1.0.0
oracle communications element manager 8.2.0
oracle communications element manager 8.2.1
oracle communications element manager 8.1.1
oracle rest data services 12.2.0.1
oracle rest data services 12.1.0.2
oracle rest data services 11.2.0.4
oracle rest data services 18c
oracle rest data services 19c
oracle retail customer management and segmentation foundation 19.0
oracle healthcare foundation 7.2.0
oracle healthcare foundation 7.3.0
oracle healthcare foundation 7.1.1
oracle communications billing and revenue management 12.0.0.3.0
oracle communications billing and revenue management 7.5.0.23.0
oracle financial services data governance for us regulatory reporting
oracle hospitality simphony
oracle banking digital experience 19.2
oracle financial services profitability management 8.1.0
oracle banking digital experience 20.1
oracle financial services loan loss forecasting and provisioning 8.1.0
oracle financial services basel regulatory capital internal ratings based approach 8.1.0
oracle siebel ui framework 20.8
oracle communications application session controller 3.8m0
oracle financial services institutional performance analytics 8.1.0
oracle insurance insbridge rating and underwriting
oracle financial services liquidity risk measurement and management 8.1.0
oracle financial services basel regulatory capital basic 8.1.0
oracle insurance allocation manager for enterprise profitability 8.0.8
oracle insurance insbridge rating and underwriting 5.6.1.0
oracle hospitality simphony 18.1
oracle financial services data integration hub 8.1.0
oracle insurance accounting analyzer 8.0.9
oracle financial services hedge management and ifrs valuations 8.1.0
oracle financial services analytical applications reconciliation framework 8.1.0
oracle insurance allocation manager for enterprise profitability 8.1.0
oracle hospitality simphony 18.2
oracle financial services asset liability management 8.1.0
oracle enterprise manager ops center 12.4.0.0
oracle enterprise session border controller 8.4
oracle financial services market risk measurement and management 8.0.8
oracle jdeveloper 12.2.1.4.0
oracle financial services funds transfer pricing 8.1.0
oracle communications services gatekeeper 7.0
oracle communications session report manager 8.1.1
oracle communications session report manager 8.2.0
oracle communications session report manager 8.2.1
oracle communications session route manager 8.1.1
oracle communications session route manager 8.2.0
oracle communications session route manager 8.2.1
oracle primavera gateway
oracle communications diameter signaling router 8.2.1
oracle communications diameter signaling router 8.0.0
oracle communications diameter signaling router 8.1
oracle communications diameter signaling router 8.2
oracle financial services regulatory reporting for de nederlandsche bank 8.0.4
oracle banking enterprise collections
oracle banking platform
oracle communications operations monitor
oracle communications analytics 12.1.1
oracle healthcare translational research 3.3.1
oracle healthcare translational research 3.3.2
oracle healthcare translational research 3.4.0
oracle healthcare translational research 3.2.1
oracle primavera gateway 15.2.18
oracle big data discovery 1.6
oracle business process management suite 12.2.1.4.0
oracle bi publisher 5.5.0.0.0
oracle transportation management 1.4.3
oracle agile product lifecycle management for process 6.1
oracle jdeveloper and adf 11.1.1.9.0
oracle jdeveloper and adf 12.1.3.0.0
oracle jdeveloper and adf 12.2.1.3.0
oracle financial services retail performance analytics 8.0.6
oracle financial services retail performance analytics 8.0.7
oracle financial services enterprise financial performance analytics 8.0.6
oracle financial services enterprise financial performance analytics 8.0.7
oracle healthcare foundation 7.2.2
oracle application testing suite 13.2
oracle application service level management 13.2.0.0
oracle application service level management 13.3.0.0
oracle communications operations monitor 4.1.0
oracle storagetek tape analytics sw tool 2.3.0
oracle diagnostic assistant 2.12.36
oracle siebel mobile applications
oracle policy automation
oracle policy automation for mobile devices
oracle utilities mobile workforce management
oracle tape library acsls 8.5.1
oracle tape library acsls 8.5
oracle communications interactive session recorder
oracle real-time scheduler
oracle financial services institutional performance analytics
oracle financial services data foundation
oracle financial services liquidity risk management 8.0.2
oracle financial services analytical applications reconciliation framework
oracle financial services basel regulatory capital internal ratings based approach
oracle financial services basel regulatory capital basic
oracle system utilities 19.1
oracle insurance performance insight 8.0.7
oracle insurance ifrs 17 analyzer 8.0.6
oracle insurance ifrs 17 analyzer 8.0.7
oracle financial services revenue management and billing 2.4.0.1
oracle financial services regulatory reporting for european banking authority 8.0.7
oracle insurance data foundation
oracle financial services revenue management and billing 2.4.0.0
oracle financial services retail customer analytics
oracle financial services regulatory reporting for us federal reserve
oracle financial services regulatory reporting for european banking authority 8.0.6
oracle financial services price creation and discovery
oracle financial services profitability management
oracle communications eagle application processor
joomla joomla\\!
juniper junos 21.2

Debian Bug report logs - #927330 drupal7: CVE-2019-11358: XSS in bundled library (jquery) Package: drupal7; Maintainer for drupal7 is Gunnar Wolf <gwolf@debianorg>; Source for drupal7 is src:drupal7 (PTS, buildd, popcon) Reported by: Gunnar Wolf <gwolf@gwolforg> Date: Thu, 18 Apr 2019 05:09:02 UTC Severity: normal ...

Debian Bug report logs - #1007145 wordpress: WordPress 592 security and maintenance release Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Craig Small <csmall@debianorg> Date: Sat, 12 Mar 2022 02:09:02 UTC S ...

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures For the stable distribution (stretch), these problems have been fixed in version 1:1277-1~deb9u1 ...

A cross-site scripting vulnerability has been found in Drupal, a fully-featured content management framework For additional information, please refer to the upstream advisory at wwwdrupalorg/sa-core-2019-006 For the stable distribution (stretch), this problem has been fixed in version 752-2+deb9u8 We recommend that you upgrade your d ...

A Prototype Pollution vulnerability was found in jquery Untrusted JSON passed to the `extend` function could lead to modifying objects up the prototype chain, including the global Object A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with various consequences (CVE-2019-11358) ...

jQuery before 300 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed (CVE-2015-9251) In Bootstrap 3x before 340 and 4x-beta before 400-beta2, XSS is possible in the data-target attribute, a different vulnerability t ...

Impact: Moderate Public Date: 2019-03-27 CWE: CWE-400 Bugzilla: 1701972: CVE-2019-11358 js-jquery: prot ...

Synopsis Important: Red Hat Single Sign-On 762 for OpenShift image security and enhancement update Type/Severity Security Advisory: Important Topic A new image is available for Red Hat Single Sign-On 762, running on RedHat OpenShift Container Platform from the release of 311 up to the releaseof 4120Red Hat Product Security has rated t ...

Synopsis Important: pcs security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for pcs is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security ...

Synopsis Moderate: ovirt-engine-ui-extensions security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 43Red Hat Product Security has rated this update as having a security impact of Moderate A ...

Synopsis Moderate: ovirt-web-ui security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 43Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...

Synopsis Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for the idm:DL1 and idm:client modules is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of M ...

Synopsis Moderate: ipa security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for ipa is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CV ...

Synopsis Moderate: python-XStatic-jQuery security update Type/Severity Security Advisory: Moderate Topic An update for python-XStatic-jQuery is now available for Red Hat OpenStackPlatform 15 (Stein)Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerability ...

Synopsis Moderate: Red Hat Single Sign-On 732 security update Type/Severity Security Advisory: Moderate Topic A security update is now available for Red Hat Single Sign-On 73 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerab ...

Synopsis Moderate: CloudForms 479 security, bug fix and enhancement update Type/Severity Security Advisory: Moderate Topic An update is now available for CloudForms Management Engine 510Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...

Synopsis Moderate: python-XStatic-jQuery security update Type/Severity Security Advisory: Moderate Topic An update for python-XStatic-jQuery is now available for Red Hat OpenStackPlatform 13 (Queens)Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerabilit ...

概述 Important: Red Hat Single Sign-On 762 security update on RHEL 8 类型/严重性 Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems 标题 New Red Hat Single Sign-On 762 packages are now available for Red Hat Enterprise Linux 8Red H ...

Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform 749 Security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat JBoss Enterprise Application Platform 74 for ...

Synopsis Important: Red Hat Single Sign-On 762 security update on RHEL 7 Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic New Red Hat Single Sign-On 762 packages are now available for Red Hat Enterprise Linux 7Red Hat ...

Synopsis Important: Red Hat Single Sign-On 762 security update on RHEL 9 Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic New Red Hat Single Sign-On 762 packages are now available for Red Hat Enterprise Linux 9Red Hat ...

Synopsis Important: Red Hat Single Sign-On 762 security update Type/Severity Security Advisory: Important Topic A security update is now available for Red Hat Single Sign-On 76 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform 749 Security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 74 Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...

Synopsis Moderate: pki-core:106 and pki-deps:106 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for the pki-core:106 and pki-deps:106 modules is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a se ...

jQuery before 340, mishandles jQueryextend(true, {}, ) because of Objectprototype pollution If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Objectprototype The bundled version of jQuery used by the Django admin has been patched to allow for the select2 library's use of jQueryextend( ...

Nessus Network Monitor leverages third-party software to help provide underlying functionality Several third-party components (OpenSSL, jQuery and momentjs) were found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution and in line with good practice, Tenable opted to upgrade the bundled Ope ...

Tenablesc leverages third-party software to help provide underlying functionality One third-party component (jQuery) was found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution and in line with good practice, Tenable opted to upgrade the bundled libraries to address the potential impact of ...

Full Disclosure mailing list archives   By Date By Thread </form>    dotCMS v511 Vulnerabilities   From: John Martinelli <john () ...

Program for FTC POWERPLAY robot by 17517 WoEN

NOTICE This repository contains the public FTC SDK for the POWERPLAY (2022-2023) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Getting Started If you are new to robotics or new to the

Practice code

NOTICE This repository contains the public FTC SDK for the Freight Frenzy (2021-2022) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Getting Started If you are new to robotics or new t

Powerplay 3101 Boom Bots team

NOTICE This repository contains the public FTC SDK for the Ultimate Goal (2020-2021) competition season Formerly this software project was hosted here Teams who are competing in the Ultimate Goal Challenge should use this new FtcRobotController repository instead of last season's (no longer updated) Skystone repository Welcome! This GitHub repository contains the sourc

6417 robot

NOTICE This repository contains the public FTC SDK for the CENTERSTAGE (2023-2024) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Requirements To use this Android Studio project, you w

This is the code for the Dragon Slayers Team 2022-2023

FTC Team 9202 Her Majesty's Engineers' copy of ftctechnh/ftc_app

Version Control for FTC Android Project

NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech C

Spring coding cohort's repository for octobot in 2023.

Ultimate Goal Repo

Qualifier #2

Repository for 2020-2021 Gluons Code

Repo for Radical Raiders during FTC PowerPlay that utilizes OpenCV for visual recognition.

## NOTICE This repository contains the public FTC SDK for the CENTERSTAGE (2023-2024) competition season ## Welcome! This GitHub repository contains the source code that is used to build an Android app to control a *FIRST* Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer ## Requirements To use this Android Studio

for FTC2021

Welcome! This repository is a fork of the official FTC SDK from githubcom/FIRST-Tech-Challenge/FtcRobotController It has the addition of our Titan Robotics Framework Library (TrcLib) and its dependencies These are added as git submodules so that they can be independently managed without the need of changing the FTC SDK (except for minor gradle changes to tie in our F

robot code

Code for Field Oriented Kiwi that may be implemented on the competitive FTC bot.

NOTICE This repository contains the public FTC SDK for the POWERPLAY (2022-2023) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Requirements To use this Android Studio project, you wil

FTC Repo for Centerstage 2023 season

NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season Formerly this software project was hosted here Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older (and no longer updated) ftc_app repository Welcome! This GitHub repository contains the source code that is used to bui

Repo for Team 47 of the ERC

NOTICE This repository contains the public FTC SDK for the POWERPLAY (2022-2023) competition season It has been modified by adding the TeleOp code for GoBilda's Strafer Chassis Kit, which uses a mecanum drivetrain This code was originated from Game Manual 0's Mecanum Drivetrain Turorial, and then modified to our needs All code is in Java Code Modifications from Ga

Repository that holds all programs from the 2020-2021 FTC Season, Ultimate Goal.

Ultimate Goal 3491 As the season has ended, this repo has been archived, and will no longer be updated The "README" below is kept for historic purposes only NOTICE This repository contains the public FTC SDK for the Ultimate Goal (2020-2021) competition season Formerly this software project was hosted here Teams who are competing in the Ultimate Goal Challenge s

Gyo Autonomous

Team 5890 2021-2022 FTC Season NOTICE This repository contains the public FTC SDK for the Freight Frenzy (2021-2022) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Getting Started If y

Codebase for the first robot I worked on during the FTC 2022-2023 Power Play Season

Sorry about all the archived repos. Hopefully this will be the last one. 2022-2023 FTC season repository for team 10158.

Codul robotului pentru competiția FTC Freight Frenzy 2021-2022

2020-2021 FTC Season

NOTICE This repository contains the public FTC SDK for the POWERPLAY (2022-2023) competition season Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot To use this SDK, download/clone the entire project to your local computer Requirements To use this Android Studio project, you wil

FTC Freight Frenzy

not complete

FTC2020

2022-2023 FTC Challenge

NOTICE This repository contains the public FTC SDK for the Freight Frenzy (2021-2022) competition season Shortcut to TeamCode folder: githubcom/FTC-Freight-Frenzy-Software/MasterSoftware/tree/20210915-141025-release-candidate/TeamCode/src/main/java/org/firstinspires/ftc/teamcode Welcome! This GitHub repository contains the source code that is used to build an Android

Pioneer Robotics PowerPlay Code

19888 FTC

Testing the use of FTCLib to build a command-based robot controller.

Freight Frenzy for the First Robotic Competition 2021-22 :)

FTC code for the 2021-2022 season

Get Started

CVE-2019-11358

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect