Skip to content
OpenAdvisories

Archive

18 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /18 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-9251 Public exploit EPSS 30%

    Cross-Site Scripting (XSS) in jquery

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

    ruby ceph jquery-rails jQuery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  • Medium 6.1
    CVE-2012-6708 Public exploit

    Cross-Site Scripting in jquery

    jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

    ruby ceph jquery-rails jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  • Medium 6.1
    CVE-2018-5773

    markdown2 is vulnerable to cross-site scripting

    An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstr…

    markdown2 PyPI
  • Medium 6.5
    CVE-2017-12197

    Improper Input Validation in libpam4j

    It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

    Red Hat libpam4j org.kohsuke:libpam4j libpam4j Ubuntu Maven