| Hostnames |
ec2-34-234-110-165.compute-1.amazonaws.com aandp.ppe.mastering.pearsoncmg.com ais.ppe.mastering.pearsoncmg.com api.ppe.mastering.pearsoncmg.com astronomy.ppe.mastering.pearsoncmg.com author.ppe.mastering.pearsoncmg.com biology.ppe.mastering.pearsoncmg.com chemistry.ppe.mastering.pearsoncmg.com engineering.ppe.mastering.pearsoncmg.com envsci.ppe.mastering.pearsoncmg.com genetics.ppe.mastering.pearsoncmg.com geography.ppe.mastering.pearsoncmg.com geology.ppe.mastering.pearsoncmg.com healthandnutrition.ppe.mastering.pearsoncmg.com import.ppe.mastering.pearsoncmg.com microbiology.ppe.mastering.pearsoncmg.com physics.ppe.mastering.pearsoncmg.com stg.mastering.pearsoncmg.com aos-mx.stg.mastering.pearsoncmg.com auth-mx.stg.mastering.pearsoncmg.com bronteil-mx.stg.mastering.pearsoncmg.com content-app-mx.stg.mastering.pearsoncmg.com content-service-mx.stg.mastering.pearsoncmg.com etext-service-mx.stg.mastering.pearsoncmg.com gimmie-mx.stg.mastering.pearsoncmg.com ies-token-validator-mx.stg.mastering.pearsoncmg.com item-editor-mx.stg.mastering.pearsoncmg.com jchem-mx.stg.mastering.pearsoncmg.com lcmon-mx.stg.mastering.pearsoncmg.com mjs-mx.stg.mastering.pearsoncmg.com outbound-service-mx.stg.mastering.pearsoncmg.com pii-service-mx.stg.mastering.pearsoncmg.com psm-mx.stg.mastering.pearsoncmg.com redirect-mx.stg.mastering.pearsoncmg.com render-mx.stg.mastering.pearsoncmg.com aandp.mx-stg.pearsondev.tech ais.mx-stg.pearsondev.tech aos.mx-stg.pearsondev.tech api.mx-stg.pearsondev.tech astronomy.mx-stg.pearsondev.tech auth.mx-stg.pearsondev.tech authoring.mx-stg.pearsondev.tech biology.mx-stg.pearsondev.tech bronteil.mx-stg.pearsondev.tech chemistry.mx-stg.pearsondev.tech content-app.mx-stg.pearsondev.tech content-service.mx-stg.pearsondev.tech db-microbiology.mx-stg.pearsondev.tech engineering.mx-stg.pearsondev.tech envsci.mx-stg.pearsondev.tech etext-service.mx-stg.pearsondev.tech genetics.mx-stg.pearsondev.tech geography.mx-stg.pearsondev.tech geology.mx-stg.pearsondev.tech gimmie.mx-stg.pearsondev.tech healthandnutrition.mx-stg.pearsondev.tech ies-token-validator.mx-stg.pearsondev.tech import.mx-stg.pearsondev.tech item-editor.mx-stg.pearsondev.tech jchem.mx-stg.pearsondev.tech lcmon.mx-stg.pearsondev.tech memcached.mx-stg.pearsondev.tech microbiology.mx-stg.pearsondev.tech mjs.mx-stg.pearsondev.tech outbound-service.mx-stg.pearsondev.tech physics.mx-stg.pearsondev.tech pii-service.mx-stg.pearsondev.tech psm.mx-stg.pearsondev.tech redirect.mx-stg.pearsondev.tech redis.mx-stg.pearsondev.tech render.mx-stg.pearsondev.tech tools.mx-stg.pearsondev.tech |
| Domains | amazonaws.com pearsoncmg.com pearsondev.tech |
| Cloud Provider | Amazon |
| Cloud Region | us-east-1 |
| Cloud Service | EC2 |
| Country | United States |
| City | Ashburn |
| Organization | Amazon Technologies Inc. |
| ISP | Amazon.com, Inc. |
| ASN | AS14618 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2020-7656 | 4.3jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. |
| CVE-2020-11023 | 4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2020-11022 | 4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
| CVE-2019-11358 | 4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. |
| CVE-2015-9251 | 4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. |
| CVE-2012-6708 | 4.3jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. |
| CVE-2011-4969 | 4.3Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag. |
