Insurance Data Foundation

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-11022 LIB MEDIUM POC PATCH This Month

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Jquery Drupal Debian Linux Fedora +66

NVD GitHub Exploit-DB VulDB

CVSS 3.1

6.9

EPSS

2.1%

CVE-2019-11358 LIB MEDIUM POC PATCH THREAT This Month

{}, ...) because of Object.prototype pollution. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Prototype Pollution Information Disclosure Jquery Debian Linux Drupal +102

NVD GitHub Exploit-DB

CVSS 3.1

6.1

EPSS

87.2%

CVE-2020-11022 LIB

EPSS 2% CVSS 6.9

MEDIUM POC PATCH This Month

XSS Jquery Drupal +68

NVD GitHub Exploit-DB VulDB

CVE-2019-11358 LIB

EPSS 87% CVSS 6.1

MEDIUM POC PATCH THREAT This Month

Prototype Pollution Information Disclosure Jquery +104

NVD GitHub Exploit-DB