Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-10735HistoryJan 09, 2019 - 5:29 a.m.
CVE-2016-10735
2019-01-0905:29:00
Debian Security Bug Tracker
security-tracker.debian.org
81
xss
bootstrap
3.x
4.x-beta
attribute
vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.004
Percentile
74.1%
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | twitter-bootstrap3 | < 3.4.0+dfsg-1 | twitter-bootstrap3_3.4.0+dfsg-1_all.deb |
| Debian | 11 | all | twitter-bootstrap3 | < 3.4.0+dfsg-1 | twitter-bootstrap3_3.4.0+dfsg-1_all.deb |
| Debian | 999 | all | twitter-bootstrap3 | < 3.4.0+dfsg-1 | twitter-bootstrap3_3.4.0+dfsg-1_all.deb |
| Debian | 13 | all | twitter-bootstrap3 | < 3.4.0+dfsg-1 | twitter-bootstrap3_3.4.0+dfsg-1_all.deb |
| Debian | 12 | all | twitter-bootstrap4 | < 4.6.1+dfsg1-4 | twitter-bootstrap4_4.6.1+dfsg1-4_all.deb |
| Debian | 11 | all | twitter-bootstrap4 | < 4.5.2+dfsg1-8~deb11u1 | twitter-bootstrap4_4.5.2+dfsg1-8~deb11u1_all.deb |
| Debian | 999 | all | twitter-bootstrap4 | < 4.6.1+dfsg1-4 | twitter-bootstrap4_4.6.1+dfsg1-4_all.deb |
| Debian | 13 | all | twitter-bootstrap4 | < 4.6.1+dfsg1-4 | twitter-bootstrap4_4.6.1+dfsg1-4_all.deb |
Related
nessus
nessus
F5 Networks BIG-IP : Bootstrap vulnerability (K000133673)
2023-06-23 00:00:00
F5 Networks BIG-IP : Bootstrap vulnerability (K05380109)
2023-04-20 00:00:00
TYPO3 8.x < 8.7.23 / 9.x < 9.5.4 Multiple Vulnerabilities
2020-07-24 00:00:00
f5
f5
K000133673 : Bootstrap vulnerability CVE-2016-10735
2023-04-27 00:00:00
K05380109 : Bootstrap vulnerability CVE-2018-14041
2021-11-19 00:00:00
ubuntucve
ubuntucve
CVE-2016-10735
2019-01-09 00:00:00
CVE-2018-14041
2018-07-13 00:00:00
osv
osv
Bootstrap Cross-site Scripting vulnerability
2019-01-17 13:57:27
CVE-2016-10735
2019-01-09 05:29:00
CVE-2018-14041
2018-07-13 14:29:00
cve
cve
CVE-2016-10735
2019-01-09 05:29:00
CVE-2018-14041
2018-07-13 14:29:00
nvd
nvd
CVE-2016-10735
2019-01-09 05:29:00
CVE-2018-14041
2018-07-13 14:29:00
gitlab
gitlab
prion
prion
Code injection
2019-01-09 05:29:00
Design/Logic Flaw
2018-07-13 14:29:00
cvelist
cvelist
CVE-2016-10735
2019-01-09 05:00:00
CVE-2018-14041
2018-07-13 14:00:00
github
github
Bootstrap Cross-site Scripting vulnerability
2019-01-17 13:57:27
Bootstrap Cross-site Scripting vulnerability
2018-09-13 15:50:32
Bootstrap Cross-site Scripting vulnerability
2018-09-13 15:49:56
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-14041)
2024-01-18 21:00:03
rubygems
rubygems
Bootstrap vulnerable to Cross-Site Scripting (XSS)
2018-09-12 21:00:00
XSS vulnerability via data-target in bootstrap
2016-07-26 21:00:00
XSS vulnerability via data-target in bootstrap-sass
2016-07-26 21:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-06-04 09:28:27
Cross-site Scripting (XSS)
2017-05-15 02:16:19
redhatcve
redhatcve
CVE-2018-14041
2019-10-09 06:49:06
debiancve
debiancve
CVE-2018-14041
2018-07-13 14:29:00
openvas
openvas
TYPO3 Multiple Vulnerabilities (Jan 2019)
2019-01-25 00:00:00
Pi-hole Web Interface < 5.0 Multiple Vulnerabilities
2020-05-12 00:00:00
typo3
typo3
Cross-Site Scripting in Bootstrap CSS toolkit
2019-01-22 00:00:00
friendsofphp
friendsofphp
Cross-Site Scripting in Bootstrap CSS toolkit
2019-01-22 08:41:33
Cross-Site Scripting in Bootstrap CSS toolkit
2019-01-22 08:41:33
hackerone
hackerone
Sifchain: Vulnerable javascript dependency at Main domain
2021-05-07 20:48:11
jvn
jvn
JVN#06527859: KinagaCMS vulnerable to cross-site scripting
2019-03-15 00:00:00
redhat
redhat
(RHSA-2020:0133) Moderate: Red Hat Decision Manager 7.6.0 Security Update
2020-01-16 16:00:35
(RHSA-2019:1456) Moderate: Red Hat Single Sign-On 7.3.2 security update
2019-06-11 15:30:20
amazon
amazon
Medium: ipa
2020-10-22 17:40:00
ics
ics
Mitsubishi Electric EcoWebServerIII
2022-02-24 12:00:00
centos
centos
ipa, python2 security update
2020-10-20 18:15:27
almalinux
almalinux
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-03 12:29:58
oraclelinux
oraclelinux
ipa security, bug fix, and enhancement update
2020-10-06 00:00:00
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-10 00:00:00
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-10 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.004
Percentile
74.1%
Related for DEBIANCVE:CVE-2016-10735