Archive

18 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /18 February 2018 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 6.1

CVE-2015-9251 Public exploit EPSS 30%

Cross-Site Scripting (XSS) in jquery

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2012-6708 Public exploit

Cross-Site Scripting in jquery

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Unscored —

CVE-2014-2017 Public exploit

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Editio…

Jan 18, 2018
Unscored —

CVE-2018-2636 Public exploit EPSS 15%

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security).…

Oracle Hospitality Simphony

Jan 18, 2018
Unscored —

CVE-2018-2698 Public exploit

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2017-10273 Public exploit

Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Deployment). Supported vers…

Oracle JDeveloper

Jan 18, 2018