Lucene search
GoogleOSV:ALSA-2021:4142HistoryNov 09, 2021 - 8:21 a.m.
Low: pcs security, bug fix, and enhancement update
2021-11-0908:21:49
Google
osv.dev
11
pcs
security fix
enhancement
update
pacemaker
corosync
jquery
cross-site scripting
untrusted code execution
cve
almalinux
release notes
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)
Security Fix(es):
-
jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)
-
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Related
nessus
nessus
AlmaLinux 8 : pcs (ALSA-2021:4142)
2022-02-09 00:00:00
Oracle Linux 8 : pcs (ELSA-2021-9552)
2021-11-19 00:00:00
CentOS 8 : pcs (CESA-2021:4142)
2021-11-11 00:00:00
almalinux
almalinux
Low: pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
oraclelinux
oraclelinux
pcs security update
2021-11-19 00:00:00
ipa security and bug fix update
2021-03-19 00:00:00
bootstrap security update
2021-08-09 00:00:00
redhat
redhat
(RHSA-2020:4211) Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update
2020-10-08 06:44:00
(RHSA-2021:4142) Low: pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
rocky
rocky
pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
ibm
ibm
osv
osv
Low: pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
CVE-2020-7656
2020-05-19 21:15:10
Cross-Site Scripting in jquery
2020-05-20 16:18:01
nvd
nvd
f5
f5
K000141005: jQuery vulnerability CVE-2020-7656
2024-09-09 00:00:00
K66544153 : jQuery vulnerability CVE-2020-11023
2020-08-03 00:00:00
rubygems
rubygems
Cross-Site Scripting in jquery
2020-05-19 21:00:00
Potential XSS vulnerability in jQuery
2020-04-28 21:00:00
cve
cve
nodejs
nodejs
Cross-Site Scripting
2020-05-20 19:52:20
cvelist
cvelist
CVE-2020-7656
2020-05-19 00:00:00
CVE-2020-11023 Potential XSS vulnerability in jQuery
2020-04-29 00:00:00
openvas
openvas
jQuery < 1.9.0 XSS Vulnerability
2020-05-26 00:00:00
jQuery 1.0.3 < 3.5.0 XSS Vulnerability
2020-05-05 00:00:00
ubuntucve
ubuntucve
githubexploit
githubexploit
Exploit for Cross-site Scripting in Jquery
2020-12-01 09:45:48
Exploit for Cross-site Scripting in Jquery
2020-04-14 19:12:01
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
veracode
veracode
Cross-Site Scripting (XSS)
2020-05-20 01:53:56
Cross-Site Scripting (XSS)
2020-04-30 02:21:22
debiancve
debiancve
prion
prion
Cross site scripting
2020-05-19 21:15:00
Code injection
2020-04-29 21:15:00
redhatcve
redhatcve
CVE-2020-7656
2020-06-23 15:25:20
CVE-2020-11023
2021-06-20 07:11:02
github
github
Cross-Site Scripting in jquery
2020-05-20 16:18:01
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
alpinelinux
alpinelinux
CVE-2020-11023
2020-04-29 21:15:11
exploitdb
exploitdb
jQuery 1.0.3 - Cross-Site Scripting (XSS)
2021-04-14 00:00:00
ics
ics
Sensormatic Electronics VideoEdge
2021-11-02 12:00:00
amazon
amazon
Medium: ipa
2021-04-20 17:55:00
packetstorm
packetstorm
jQuery 1.0.3 Cross Site Scripting
2021-04-14 00:00:00
zdt
zdt
jQuery 1.0.3 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
[SECURITY] Fedora 33 Update: drupal7-7.72-1.fc33
2020-09-25 17:15:48
[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32
2020-07-23 01:06:59
atlassian
atlassian
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
attackerkb
attackerkb
CVE-2020-11023
2020-04-29 00:00:00
CVE-2020-11022
2020-04-29 00:00:00
hp
hp
HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
Certain HP Printers and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
debian
debian
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:22
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:21
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
suse
suse
Security update for otrs (moderate)
2020-11-10 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2020-07-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
freebsd
freebsd
Cacti -- multiple vulnerabilities
2020-07-15 00:00:00