View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-9251 severity moderate: SUSE including 281 source package names (2.17-17.3:libruby2_5-2_5-2.5.7-4.8.1, 2.17-17.3:ruby2.5-2.5.7-4.8.1, …), 872 product×package rows across 206 product lines (Container bci/ruby, Container suse/rmt-server, … (206 product lines)): Fixed 713, Known Affected 157, Known Not Affected 2.
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.