Every CVE Search/ Get API key

CVE-2020-11023

Potential XSS vulnerability in jQuery

6.9 MediumIn KEVPublic exploitFix available

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
None

Exploit likelihood

84.9%Up 51.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.9

Potential XSS vulnerability in jQuery

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
CVE-2020-11023
CVSS 3.1
6.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2020-0387 6.9

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
EUVD-2020-0387
CVSS 3.1
6.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-jpcq-cgw6-v4j6 6.9

Potential XSS vulnerability in jQuery

Impact

Passing HTML containing <option> elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Patches

This problem is patched in jQuery 3.5.0.

Workarounds

To workaround this issue without upgrading, use DOMPurify with its SAFE_FOR_JQUERY option to sanitize the HTML string before passing it to a jQuery method.

References

https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/

For more information

If you have any questions or comments about this advisory, search for a relevant issue in the jQuery repo. If you don't find an answer, open a new issue.

Record
GHSA-jpcq-cgw6-v4j6
CVSS 3.1
6.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H
Weakness
CWE-79
Updated
2026-11-02
CISA KEV No score

JQuery Cross-Site Scripting (XSS) Vulnerability

JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.

Record
CVE-2020-11023
Weakness
CWE-79
Updated
2026-11-02
NVD 6.9

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
CVE-2020-11023
CVSS 3.1
6.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVALPINE-CVE-2020-11023 6.1

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
ALPINE-CVE-2020-11023
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-03
Show 49 moreShow less
OSV 6.1

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
CVE-2020-11023
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-11023 6.1

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Record
DEBIAN-CVE-2020-11023
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVGHSA-jpcq-cgw6-v4j6 6.9

Potential XSS vulnerability in jQuery

Impact

Passing HTML containing <option> elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Patches

This problem is patched in jQuery 3.5.0.

Workarounds

To workaround this issue without upgrading, use DOMPurify with its SAFE_FOR_JQUERY option to sanitize the HTML string before passing it to a jQuery method.

References

https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/

For more information

If you have any questions or comments about this advisory, search for a relevant issue in the jQuery repo. If you don't find an answer, open a new issue.

Record
GHSA-jpcq-cgw6-v4j6
CVSS 3.1
6.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H
Weakness
CWE-79
Updated
2026-11-02
OSVRHSA-2020:3247 8.1

Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update

Record
RHSA-2020:3247
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3369 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update

Record
RHSA-2020:3369
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:3807 7.4

Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

Record
RHSA-2020:3807
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4211 6.1

Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update

Record
RHSA-2020:4211
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2020:4847 8.6

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

Record
RHSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:5412 6.1

Red Hat Security Advisory: python-XStatic-jQuery224 security update

Record
RHSA-2020:5412
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:0851 8.1

Red Hat Security Advisory: pki-core security and bug fix update

Record
RHSA-2021:0851
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0860 6.1

Red Hat Security Advisory: ipa security and bug fix update

Record
RHSA-2021:0860
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:1846 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Record
RHSA-2021:1846
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:4142 6.1

Red Hat Security Advisory: pcs security, bug fix, and enhancement update

Record
RHSA-2021:4142
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:6393 7.5

Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update

Record
RHSA-2022:6393
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:7343 10.0

Red Hat Security Advisory: pcs security update

Record
RHSA-2022:7343
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0552 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0552
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0553 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0553
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0554 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:1070 6.1

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

Record
RHSA-2025:1070
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1185 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1185
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1209 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1209
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1210 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1210
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1211 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1211
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1212 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1212
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1213 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1213
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1214 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1214
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1215 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1215
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1216 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1216
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1217 6.1

Red Hat Security Advisory: tbb security update

Record
RHSA-2025:1217
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1247 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1247
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1255 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1255
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1256 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1256
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1300 6.1

Red Hat Security Advisory: gcc-toolset-14-gcc security update

Record
RHSA-2025:1300
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1301 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1301
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1303 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1303
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1304 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1304
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1305 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1305
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1306 6.1

Red Hat Security Advisory: gcc-toolset-13-gcc security update

Record
RHSA-2025:1306
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1308 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1308
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1309 6.1

Red Hat Security Advisory: gcc-toolset-13-gcc security update

Record
RHSA-2025:1309
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1310 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1310
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1311 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1311
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1312 6.1

Red Hat Security Advisory: gcc security update

Record
RHSA-2025:1312
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1314 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1314
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1315 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1315
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:1329 6.1

Red Hat Security Advisory: doxygen security update

Record
RHSA-2025:1329
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02

Affected products

Show 40 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
jquery
npm
 1.0.3 up to 3.5.0
3.5.0
jquery-rails
RubyGems
 before 4.4.0
4.4.0
jQuery
NuGet
 1.0.3 up to 3.5.0
3.5.0
org.webjars.npm:jquery
Maven
 1.0.3 up to 3.5.0
3.5.0
components/jquery
Packagist
 1.0.3 up to 3.5.0
3.5.0
cacti
Alpine:v3.13
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.14
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.15
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.16
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.17
 before 1.2.13-r0
1.2.13-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
cacti
Alpine:v3.18
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.19
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.20
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.21
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.22
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.23
 before 1.2.13-r0
1.2.13-r0
cacti
Alpine:v3.24
 before 1.2.13-r0
1.2.13-r0
drupal7
Alpine:v3.11
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.12
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.13
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.14
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.15
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.16
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.17
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.18
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.19
 before 7.70-r0
7.70-r0
drupal7
Alpine:v3.20
 before 7.70-r0
7.70-r0
bind-dyndb-ldap
AlmaLinux:8
 before 11.6-2.module_el8.5.0+2603+92118e57
11.6-2.module_el8.5.0+2603+92118e57
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
opendnssec
AlmaLinux:8
 before 2.1.7-1.module_el8.6.0+2881+2f24dc92
2.1.7-1.module_el8.6.0+2881+2f24dc92
opendnssec
AlmaLinux:8
 before 2.1.7-1.module_el8.5.0+2603+92118e57
2.1.7-1.module_el8.5.0+2603+92118e57
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.5.0+2603+92118e57
0.5.0-1.module_el8.5.0+2603+92118e57
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2881+2f24dc92
0.5.0-1.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2737+7e73ea90
0.5.0-1.module_el8.6.0+2737+7e73ea90
python3-kdcproxy
AlmaLinux:8
 before 0.4-5.module_el8.5.0+2603+92118e57
0.4-5.module_el8.5.0+2603+92118e57
python3-kdcproxy
AlmaLinux:8
 before 0.4-5.module_el8.6.0+2881+2f24dc92
0.4-5.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.5.0+2603+92118e57
1.0.0-9.module_el8.5.0+2603+92118e57
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2881+2f24dc92
1.0.0-9.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2737+7e73ea90
1.0.0-9.module_el8.6.0+2737+7e73ea90
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2737+7e73ea90
1.3.2-9.module_el8.6.0+2737+7e73ea90
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2881+2f24dc92
1.3.2-9.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.5.0+2603+92118e57
1.3.2-9.module_el8.5.0+2603+92118e57
softhsm
AlmaLinux:8
 before 2.6.0-5.module_el8.5.0+2603+92118e57
2.6.0-5.module_el8.5.0+2603+92118e57
softhsm
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm-devel
AlmaLinux:8
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm-devel
AlmaLinux:8
 before 2.6.0-5.module_el8.5.0+2603+92118e57
2.6.0-5.module_el8.5.0+2603+92118e57
pcs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.10.10-4.el8.alma
0.10.10-4.el8.alma
pcs-snmp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.10.10-4.el8.alma
0.10.10-4.el8.alma
python3-tbb
AlmaLinux:9
 before 2020.3-8.el9_5.1
2020.3-8.el9_5.1
tbb
AlmaLinux:9
 before 2020.3-8.el9_5.1
2020.3-8.el9_5.1
tbb-devel
AlmaLinux:9
 before 2020.3-8.el9_5.1
2020.3-8.el9_5.1
tbb-doc
AlmaLinux:9
 before 2020.3-8.el9_5.1
2020.3-8.el9_5.1
python3-tbb
AlmaLinux:8
 before 2018.2-10.el8_10.1
2018.2-10.el8_10.1
tbb
AlmaLinux:8
 before 2018.2-10.el8_10.1
2018.2-10.el8_10.1
tbb-devel
AlmaLinux:8
 before 2018.2-10.el8_10.1
2018.2-10.el8_10.1
tbb-doc
AlmaLinux:8
 before 2018.2-10.el8_10.1
2018.2-10.el8_10.1
gcc-toolset-14-gcc
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-gcc-c++
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-gcc-gfortran
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-gcc-plugin-annobin
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-gcc-plugin-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libasan-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libatomic-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libgccjit
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libgccjit-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libitm-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-liblsan-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libquadmath-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libstdc++-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libstdc++-docs
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libtsan-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-libubsan-devel
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
gcc-toolset-14-offload-nvptx
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
libasan8
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
liblsan
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
libtsan2
AlmaLinux:9
 before 14.2.1-1.3.el9_5
14.2.1-1.3.el9_5
cpp
AlmaLinux:8
 before 8.5.0-23.el8_10.alma.1
8.5.0-23.el8_10.alma.1
gcc
AlmaLinux:8
 before 8.5.0-23.el8_10.alma.1
8.5.0-23.el8_10.alma.1
drupal
Bitnami
 7.0.0 up to 7.70.0, 8.7.0 up to 8.7.14, 8.8.0 up to 8.8.6
7.70.08.7.148.8.6
cpp
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
cross-gcc-aarch64
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
cross-gcc-c++-aarch64
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-c++
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-gdb-plugin
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-gfortran
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-offload-nvptx
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-plugin-annobin
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
gcc-plugin-devel
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libasan
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libasan-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libatomic
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libatomic-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgcc
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgccjit
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgccjit-devel
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgfortran
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgfortran-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgomp
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libgomp-offload-nvptx
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libitm
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libitm-devel
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libitm-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
liblsan
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
liblsan-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libquadmath
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libquadmath-devel
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libquadmath-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libstdc++
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libstdc++-devel
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libstdc++-docs
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libstdc++-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libtsan
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libtsan-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libubsan
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
libubsan-static
TuxCare:AlmaLinux:9.2
 before 11.3.1-4.3.el9.alma.tuxcare.els2
11.3.1-4.3.el9.alma.tuxcare.els2
cpp
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-c++
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-gdb-plugin
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-gfortran
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-offload-nvptx
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-plugin-annobin
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
gcc-plugin-devel
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libasan
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libasan-static
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libatomic
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libatomic-static
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libgcc
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libgfortran
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libgfortran-static
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libgomp
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libgomp-offload-nvptx
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libitm
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libitm-devel
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
libitm-static
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
liblsan
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
liblsan-static
TuxCare:CentOS-Stream:8
 before 8.5.0-22.el8.tuxcare.els1
8.5.0-22.el8.tuxcare.els1
node-jquery
Debian:12
 before 3.5.0+dfsg-2
3.5.0+dfsg-2
node-jquery
Debian:13
 before 3.5.0+dfsg-2
3.5.0+dfsg-2
node-jquery
Debian:14
 before 3.5.0+dfsg-2
3.5.0+dfsg-2
znc
Debian:12
 All versions, plus listed versions
1.10.1-11.10.2-11.10.3-11.8.2-3.11.8.2-3.1+deb12u1
Show 5 moreShow less
1.8.2-41.9.0-11.9.0-21.9.1-11.9.1-2
 None known
znc
Debian:13
 All versions, plus listed versions
1.10.1-11.10.2-11.10.3-11.9.1-21.9.1-2+deb13u1
 None known
znc
Debian:14
 before 1.10.3-1, plus listed versions
1.10.1-11.10.2-11.9.1-2
1.10.3-1
jquery
Debian:9
From an advisory covering 2 CVEs
 before 3.1.1-2+deb9u2, plus listed versions
3.1.1-23.1.1-2+deb9u1
3.1.1-2+deb9u2
otrs2
Debian:10
From an advisory covering 32 CVEs
 before 6.0.16-2+deb10u1, plus listed versions
2.0.4p01-102.0.4p01-112.0.4p01-122.0.4p01-132.0.4p01-14
Show 45 moreShow less
2.0.4p01-14.12.0.4p01-152.0.4p01-162.0.4p01-172.0.4p01-182.0.4p01-62.0.4p01-72.0.4p01-82.0.4p01-92.0.99beta1-12.0.99beta1-22.1.1-12.1.3-12.1.4-12.1.4-22.1.5-12.1.5-22.1.5-32.1.6-12.1.7-12.1.7-22.2.0~beta2-12.2.0~beta3-12.2.1-12.2.2-12.2.3-12.2.4-12.2.5-12.2.5-22.2.6-12.2.7-12.2.7-22.2.7-2lenny12.2.7-2lenny22.2.7-2lenny32.2.7-32.3.2-12.3.2-22.3.3-12.3.4-12.3.4-22.3.4-32.3.4-42.3.4-52.3.4-6
6.0.16-2+deb10u1
drupal7
Debian:9
From an advisory covering 3 CVEs
 before 7.52-2+deb9u10, plus listed versions
7.52-27.52-2+deb9u17.52-2+deb9u27.52-2+deb9u37.52-2+deb9u4
Show 5 moreShow less
7.52-2+deb9u57.52-2+deb9u67.52-2+deb9u77.52-2+deb9u87.52-2+deb9u9
7.52-2+deb9u10
jquery-rails
RubyGems
 before 4.4.0, plus listed versions
0.1.10.1.20.1.30.20.2.1
Show 45 moreShow less
0.2.20.2.30.2.40.2.50.2.60.2.71.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.rc2.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.2.02.2.12.2.22.3.03.0.03.0.13.0.23.0.33.0.43.1.0
4.4.0
jQuery
NuGet
 1.0.3 up to 3.5.0, plus listed versions
1.10.01.10.0.11.10.11.10.21.11.0
Show 45 moreShow less
1.11.11.11.21.11.31.12.01.12.11.12.21.12.31.12.41.4.11.4.21.4.31.4.41.5.01.5.11.5.21.6.01.6.11.6.21.6.31.6.41.7.01.7.11.7.1.11.7.21.8.01.8.11.8.21.8.31.9.01.9.12.0.02.0.12.0.1.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.2.02.2.12.2.22.2.32.2.4
3.5.0
org.webjars.npm:jquery
Maven
 1.0.3 up to 3.5.0, plus listed versions
1.11.01.11.11.11.31.12.11.12.2
Show 30 moreShow less
1.12.31.12.41.7.21.7.31.8.21.8.31.9.12.1.02.1.12.1.1-rc12.1.1-rc22.1.32.1.42.2.02.2.12.2.22.2.32.2.43.0.03.0.0-alpha13.0.0-beta13.0.0-rc13.1.03.1.13.2.03.2.13.3.03.3.13.4.03.4.1
3.5.0
components/jquery
Packagist
 1.0.3 up to 3.5.0, plus listed versions
1.10.01.10.11.10.21.11.01.11.1
Show 26 moreShow less
1.11.21.11.31.12.01.12.11.12.41.8.31.9.01.9.12.0.02.0.12.0.22.0.32.1.02.1.12.1.32.1.42.2.02.2.12.2.43.0.03.1.03.1.13.2.03.2.13.3.13.4.1
3.5.0
novnc
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:1.1.0-1.el8ost
0:1.1.0-1.el8ost
ovirt-engine
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-api-explorer
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:0.0.6-1.el8ev
0:0.0.6-1.el8ev
ovirt-engine-backend
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-dbscripts
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-health-check-bundler
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-restapi
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-base
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-cinderlib
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-imageio
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-ovirt-engine
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-ovirt-engine-common
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-setup-plugin-websocket-proxy
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-tools
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-tools-backup
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-webadmin-portal
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
ovirt-engine-websocket-proxy
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
python3-ovirt-engine-lib
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
rhvm
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.1.8-0.7.el8ev
0:4.4.1.8-0.7.el8ev
rhvm-dependencies
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:4.4.0-1.el8ev
0:4.4.0-1.el8ev
ovirt-engine-ui-extensions
Red Hat:rhev_manager:4.4:el8
From an advisory covering 8 CVEs
 before 0:1.2.2-1.el8ev
0:1.2.2-1.el8ev
kiali
Red Hat:service_mesh:1.1::el7
From an advisory covering 5 CVEs
 before 0:v1.12.10.redhat2-1.el7
0:v1.12.10.redhat2-1.el7
ior
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-citadel
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-cni
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-galley
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-grafana
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:6.4.3-13.el8
0:6.4.3-13.el8
servicemesh-grafana-prometheus
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:6.4.3-13.el8
0:6.4.3-13.el8
servicemesh-istioctl
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-mixc
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-mixs
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-operator
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-2.el8
0:1.1.6-2.el8
servicemesh-pilot-agent
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-pilot-discovery
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
servicemesh-prometheus
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:2.14.0-14.el8
0:2.14.0-14.el8
servicemesh-sidecar-injector
Red Hat:service_mesh:1.1::el8
From an advisory covering 5 CVEs
 before 0:1.1.6-1.el8
0:1.1.6-1.el8
ovirt-engine-ui-extensions
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:1.2.3-1.el8ev
0:1.2.3-1.el8ev
ovirt-web-ui
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:1.6.4-1.el8ev
0:1.6.4-1.el8ev
ovirt-engine
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-backend
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-dbscripts
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-health-check-bundler
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-restapi
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-base
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-cinderlib
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-imageio
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-ovirt-engine
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-ovirt-engine-common
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-setup-plugin-websocket-proxy
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-tools
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-tools-backup
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
ovirt-engine-webadmin-portal
Red Hat:rhev_manager:4.4:el8
From an advisory covering 4 CVEs
 before 0:4.4.2.3-0.6.el8ev
0:4.4.2.3-0.6.el8ev
apache-commons-collections
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.2.2-10.module+el8.3.0+53+ea062990
0:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-collections
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.2.2-10.module+el8.3.0+74+855e3f5d
0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-lang
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.6-21.module+el8.3.0+53+ea062990
0:2.6-21.module+el8.3.0+53+ea062990
apache-commons-lang
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.6-21.module+el8.3.0+74+855e3f5d
0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-net
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.6-3.module+el8.3.0+53+ea062990
0:3.6-3.module+el8.3.0+53+ea062990
apache-commons-net
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.6-3.module+el8.3.0+74+855e3f5d
0:3.6-3.module+el8.3.0+74+855e3f5d
bea-stax
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2.0-16.module+el8.3.0+53+ea062990
0:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfoset
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2.13-9.module+el8.3.0+53+ea062990
0:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxb
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.3.0+53+ea062990
0:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-api
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.2.12-8.module+el8.3.0+53+ea062990
0:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotations
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-core
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databind
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providers
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.9.9-1.module+el8.3.0+53+ea062990
0:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotations
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.6-4.module+el8.3.0+53+ea062990
0:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:3.1-28.module+el8.3.0+53+ea062990
1:3.1-28.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:3.1-28.module+el8.3.0+74+855e3f5d
1:3.1-28.module+el8.3.0+74+855e3f5d
javassist
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.3.0+53+ea062990
0:3.18.1-8.module+el8.3.0+53+ea062990
javassist
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.3.0+74+855e3f5d
0:3.18.1-8.module+el8.3.0+74+855e3f5d
ldapjdk
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
pki-servlet-engine
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:9.0.30-1.module+el8.3.0+53+ea062990
1:9.0.30-1.module+el8.3.0+53+ea062990
python-nss
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.3.0+53+ea062990
0:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatype
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2011.1-7.module+el8.3.0+53+ea062990
0:2011.1-7.module+el8.3.0+53+ea062990
resteasy
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.0.26-3.module+el8.3.0+53+ea062990
0:3.0.26-3.module+el8.3.0+53+ea062990
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.5.0+697+f586bb30
0:1.7.25-4.module+el8.5.0+697+f586bb30
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.3.0+74+855e3f5d
0:1.7.25-4.module+el8.3.0+74+855e3f5d
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.3.0+133+b8b54b58
0:1.7.25-4.module+el8.3.0+133+b8b54b58
stax-ex
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.7-8.module+el8.3.0+53+ea062990
0:1.7.7-8.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7-24.module+el8.3.0+53+ea062990
0:1.7-24.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7-24.module+el8.3.0+74+855e3f5d
0:1.7-24.module+el8.3.0+74+855e3f5d
xalan-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.1-38.module+el8.3.0+53+ea062990
0:2.7.1-38.module+el8.3.0+53+ea062990
xalan-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.1-38.module+el8.3.0+74+855e3f5d
0:2.7.1-38.module+el8.3.0+74+855e3f5d
xerces-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.11.0-34.module+el8.3.0+53+ea062990
0:2.11.0-34.module+el8.3.0+53+ea062990
xerces-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.11.0-34.module+el8.3.0+74+855e3f5d
0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.5.0+697+f586bb30
0:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.3.0+74+855e3f5d
0:1.4.01-25.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.3.0+53+ea062990
0:1.4.01-25.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2-26.module+el8.3.0+53+ea062990
0:1.2-26.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2-26.module+el8.3.0+74+855e3f5d
0:1.2-26.module+el8.3.0+74+855e3f5d
xmlstreambuffer
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.5.4-8.module+el8.3.0+53+ea062990
0:1.5.4-8.module+el8.3.0+53+ea062990
xsom
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:0-19.20110809svn.module+el8.3.0+53+ea062990
0:0-19.20110809svn.module+el8.3.0+53+ea062990
bind-dyndb-ldap
Rocky Linux:8
 before 0:11.6-2.module+el8.4.0+429+6bd33fea
0:11.6-2.module+el8.4.0+429+6bd33fea
custodia
Rocky Linux:8
 before 0:0.6.0-3.module+el8.4.0+429+6bd33fea
0:0.6.0-3.module+el8.4.0+429+6bd33fea
ipa
Rocky Linux:8
 before 0:4.9.2-3.module+el8.4.0+429+6bd33fea
0:4.9.2-3.module+el8.4.0+429+6bd33fea
ipa-healthcheck
Rocky Linux:8
 before 0:0.7-3.module+el8.4.0+429+6bd33fea
0:0.7-3.module+el8.4.0+429+6bd33fea
opendnssec
Rocky Linux:8
 before 0:2.1.7-1.module+el8.4.0+429+6bd33fea
0:2.1.7-1.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-1.module+el8.4.0+429+6bd33fea
0:0.5.0-1.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
python-kdcproxy
Rocky Linux:8
 before 0:0.4-5.module+el8.3.0+244+0b2ae752
0:0.4-5.module+el8.3.0+244+0b2ae752
python-qrcode
Rocky Linux:8
 before 0:5.1-12.module+el8.4.0+429+6bd33fea
0:5.1-12.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.module+el8.4.0+429+6bd33fea
0:1.3.2-9.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
pyusb
Rocky Linux:8
 before 0:1.0.0-9.module+el8.4.0+429+6bd33fea
0:1.0.0-9.module+el8.4.0+429+6bd33fea
pyusb
Rocky Linux:8
 before 0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
softhsm
Rocky Linux:8
 before 0:2.6.0-5.module+el8.4.0+429+6bd33fea
0:2.6.0-5.module+el8.4.0+429+6bd33fea
pcs
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.10.10-4.el8
0:0.10.10-4.el8
tbb
Rocky Linux:9
 before 0:2020.3-8.el9_5.1
0:2020.3-8.el9_5.1
tbb
Rocky Linux:8
 before 0:2018.2-10.el8_10.1
0:2018.2-10.el8_10.1
gcc-toolset-14-gcc
Rocky Linux:9
 before 0:14.2.1-1.3.el9_5
0:14.2.1-1.3.el9_5
drupal7
Ubuntu:Pro:14.04:LTS
 before 7.26-1ubuntu0.1+esm3, plus listed versions
7.23-17.24-17.24-27.26-17.26-1ubuntu0.17.26-1ubuntu0.1+esm17.26-1ubuntu0.1+esm2
7.26-1ubuntu0.1+esm3
drupal7
Ubuntu:Pro:16.04:LTS
 before 7.44-1ubuntu1~16.04.0+esm3, plus listed versions
7.38-17.41-17.44-1ubuntu1~16.04.07.44-1ubuntu1~16.04.0+esm17.44-1ubuntu1~16.04.0+esm2
7.44-1ubuntu1~16.04.0+esm3
jquery
Ubuntu:Pro:18.04:LTS
 before 3.2.1-1ubuntu0.1~esm1, plus listed versions
3.1.1-23.2.1-1
3.2.1-1ubuntu0.1~esm1
jquery
Ubuntu:20.04:LTS
 before 3.3.1~dfsg-3ubuntu0.1, plus listed versions
3.3.1~dfsg-3
3.3.1~dfsg-3ubuntu0.1
jquery
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 3.3.1~dfsg-3ubuntu0.1, plus listed versions
3.3.1~dfsg-3
3.3.1~dfsg-3ubuntu0.1
jquery
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
 before 1.7.2+dfsg-2ubuntu1+esm1, plus listed versions
1.7.2+dfsg-2ubuntu1
1.7.2+dfsg-2ubuntu1+esm1
jquery
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 1.11.3+dfsg-4ubuntu0.1~esm1, plus listed versions
1.7.2+dfsg-3ubuntu21.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1
jquery
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 3.2.1-1ubuntu0.1~esm1, plus listed versions
3.1.1-23.2.1-1
3.2.1-1ubuntu0.1~esm1
drupal7
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 7.26-1ubuntu0.1+esm3, plus listed versions
7.23-17.24-17.24-27.26-17.26-1ubuntu0.17.26-1ubuntu0.1+esm17.26-1ubuntu0.1+esm2
7.26-1ubuntu0.1+esm3
drupal7
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 7.44-1ubuntu1~16.04.0+esm3, plus listed versions
7.38-17.41-17.44-1ubuntu1~16.04.07.44-1ubuntu1~16.04.0+esm17.44-1ubuntu1~16.04.0+esm2
7.44-1ubuntu1~16.04.0+esm3
cacti
SUSE:Package Hub 12
From an advisory covering 4 CVEs
 before 1.2.13-11.1
1.2.13-11.1
cacti-spine
SUSE:Package Hub 12
From an advisory covering 4 CVEs
 before 1.2.13-8.1
1.2.13-8.1
cacti
openSUSE:Leap 15.1
From an advisory covering 4 CVEs
 before 1.2.13-11.1
1.2.13-11.1
cacti-spine
openSUSE:Leap 15.1
From an advisory covering 4 CVEs
 before 1.2.13-8.1
1.2.13-8.1
cacti
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 1.2.13-11.1
1.2.13-11.1
cacti-spine
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 1.2.13-8.1
1.2.13-8.1
cacti
SUSE:Package Hub 15 SP1
From an advisory covering 4 CVEs
 before 1.2.13-bp151.4.12.1
1.2.13-bp151.4.12.1
cacti-spine
SUSE:Package Hub 15 SP1
From an advisory covering 4 CVEs
 before 1.2.13-bp151.4.12.1
1.2.13-bp151.4.12.1
otrs
SUSE:Package Hub 15 SP1
From an advisory covering 2 CVEs
 before 6.0.30-bp152.2.11.1
6.0.30-bp152.2.11.1
otrs
SUSE:Package Hub 15 SP2
From an advisory covering 2 CVEs
 before 6.0.30-bp152.2.11.1
6.0.30-bp152.2.11.1
otrs
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 6.0.30-bp152.2.11.1
6.0.30-bp152.2.11.1
otrs
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 6.0.30-bp152.2.11.1
6.0.30-bp152.2.11.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBjQuery 1.0.3 - Cross-Site Scripting (XSS)2021-04-14
PoC in GitHubSnorlyd/https-nj.gov---CVE-2020-110232022-05-23
PoC in GitHubCybernegro/CVE-2020-110232024-01-03
PoC in GitHubandreassundstrom/cve-2020-11023-demonstration2024-04-13
PoC in GitHubhoneyb33z/cve-2020-11023-scanner2025-01-30
PoC in GitHubGarlicB/jquery35-local-agent2026-07-05
PoC in GitHubasoka666/Cve-2020-110232026-07-14

History

History
RecordedChangedSources
affected
exploitation
affected, aliases, aliases_more, referencesOSV
exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-11023 is a medium vulnerability (CVSS 6.9) in Jquery, published April 29, 2020. CISA lists it as known to be exploited, since January 23, 2025. EUVD reports exploitation since January 23, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 84.9%, the 99th percentile. Fixed in jquery 3.5.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2,148 package rows, 201 versions and 848 references. The JSON record has them. Also not on the record: 13 aliases and 9 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 63 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open