Lucene search

CVE-2018-14041

🗓️ 13 Jul 2018 14:00:29Reported by [email protected]Type

XSS in Bootstrap 4.1.2 data-target propert

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-14041)	18 Jan 202421:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private Monitoring is vulnerable to XSS attack in Prometheus (CVE-2018-14041)	29 Jun 201915:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-14041)	26 Jan 202421:58	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect V5 is impacted by vulnerabilities in Bootstrap (CVE-2018-14040 CVE-2018-14041 CVE-2018-14042)	23 Apr 201918:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Verify Privilege Vault previously known as IBM Security Secret Server	23 Sep 202005:03	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202413:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	2 Dec 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	25 Apr 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	27 Jan 202516:12	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs	17 Oct 202400:38	–	ibm

Nvd

Node

getbootstrap bootstrapRange4.0.0–4.1.2

getbootstrap bootstrapMatch4.0.0alpha

getbootstrap bootstrapMatch4.0.0alpha2

getbootstrap bootstrapMatch4.0.0alpha3

getbootstrap bootstrapMatch4.0.0alpha4

getbootstrap bootstrapMatch4.0.0alpha5

getbootstrap bootstrapMatch4.0.0alpha6

getbootstrap bootstrapMatch4.0.0beta

getbootstrap bootstrapMatch4.0.0beta2

getbootstrap bootstrapMatch4.0.0beta3

Source	Link
oracle	www.oracle.com/security-alerts/cpuApr2021.html
blog	www.blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714%40%3Cissues.hbase.apache.org%3E
packetstormsecurity	www.packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
github	www.github.com/twbs/bootstrap/pull/26630
github	www.github.com/twbs/bootstrap/issues/26627
seclists	www.seclists.org/fulldisclosure/2019/May/11
lists	www.lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e%40%3Cdev.superset.apache.org%3E
seclists	www.seclists.org/bugtraq/2019/May/18

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jul 2018 14:29Current

6.2Medium risk

Vulners AI Score6.2

CVSS24.3

CVSS36.1

EPSS0.00501

CWE-79