CVE:CVE-2021-41183 |
vulnerable |
2026-06-08 05:35:19.951943 |
XSS in `*Text` options of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.803Z
Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16335 |
vulnerable |
2026-06-08 05:13:08.346205 |
Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Published: 2019-09-15T21:45:50.000Z
Updated: 2024-08-05T01:10:41.788Z
Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14540 |
vulnerable |
2026-06-08 05:12:54.964001 |
Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Published: 2019-09-15T21:45:22.000Z
Updated: 2024-08-05T00:19:41.379Z
Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14439 |
vulnerable |
2026-06-08 05:12:54.854535 |
Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
Published: 2019-07-30T10:49:43.000Z
Updated: 2024-08-05T00:19:41.289Z
Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14379 |
vulnerable |
2026-06-08 05:12:54.786831 |
Details available
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
Published: 2019-07-29T11:42:42.000Z
Updated: 2024-08-05T00:19:40.551Z
Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15756 |
vulnerable |
2026-06-08 05:11:03.505720 |
db.gcve.eu details were skipped to keep the page responsive.
|
Imported from gcve-enriched-dumps CVE data |