Lucene search
K

2341 matches found

CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.17 views

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

5.5CVSS5.7AI score0.00422EPSS
Exploits1
CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.19 views

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

5.5CVSS5.5AI score0.00254EPSS
Exploits0
CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.13 views

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15. A patched version of the package is available...

5.5CVSS6.3AI score0.00867EPSS
Exploits1
CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.18 views

CVE-2023-37460 affecting package javapackages-bootstrap for versions less than 1.5.0-4

CVE-2023-37460 affecting package javapackages-bootstrap for versions less than 1.5.0-4. A patched version of the package is available...

9.8CVSS9.6AI score0.0207EPSS
Exploits1
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.15 views

Fedora: Security Advisory for javapackages-bootstrap (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
OSV
OSV
added 2024/03/06 11:10 a.m.15 views

BIT-TYPO3-2021-21365

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custo...

5.4CVSS5.4AI score0.00941EPSS
Exploits1References3
OSV
OSV
added 2024/03/06 11:3 a.m.35 views

BIT-POSTGRESQL-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with...

8.8CVSS8.8AI score0.01572EPSS
Exploits0References29
Patchstack
Patchstack
added 2024/03/04 12:0 a.m.7 views

WordPress Ultimate Bootstrap Elements for Elementor Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Bootstrap Elements for Elementor Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1398 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ba7f512c3fec Credit...

6.4CVSS5.8AI score0.0051EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2024/03/02 1:15 p.m.13 views

Cross site scripting

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headingtitletag’ and ’headingsubtitletag’ parameters in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it...

5.5CVSS6.1AI score0.0051EPSS
Exploits0References3
CVE
CVE
added 2024/03/02 12:39 p.m.73 views

CVE-2024-1398

CVE-2024-1398 affects the Ultimate Bootstrap Elements for Elementor plugin for WordPress. The vulnerability is Stored Cross-Site Scripting via the heading_title_tag and heading_sub_title_tag parameters in all versions up to 1.3.6, caused by insufficient input sanitization and output escaping. The...

6.4CVSS5.8AI score0.0051EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/03/02 12:0 a.m.3 views

WordPress Plugin Ultimate Bootstrap Elements for Elementor Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS8.4AI score0.0051EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/03/02 12:0 a.m.4 views

PT-2024-18009 · WordPress · The Ultimate Bootstrap Elements For Elementor

Name of the Vulnerable Software and Affected Versions: The Ultimate Bootstrap Elements for Elementor plugin for WordPress versions up to, and including, 1.3.6 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

6.4CVSS7.9AI score0.0051EPSS
Exploits0References6
OSV
OSV
added 2024/02/19 9:15 a.m.2 views

AZL-34812 CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

5.5CVSS6.6AI score0.00441EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/02/17 3:24 a.m.1 views

SUSE CVE-2023-32189

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

5.9CVSS6.8AI score0.00147EPSS
Exploits0References5
Openbugbounty
Openbugbounty
added 2024/02/11 11:46 a.m.9 views

bootstrap-template.com Cross Site Scripting vulnerability OBB-3851444

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.2 views

Red Hat Shim Security Breach

Red Hat Shim is a simple software package from Red Hat. It is intended to be used as a first-stage boot loader on UEFI systems. A security vulnerability exists in Red Hat Shim. An attacker exploiting this vulnerability could cause memory corruption and possibly lead to a bootstrap crash or data...

7.4CVSS8.7AI score0.00432EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/26 10:0 p.m.39 views

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-20676)

Summary Bootstrap is used by IBM Storage Ceph as a CSS framework. CVE-2018-20676 This bulletin identifies the steps to take to address the vulnerability in Bootstrap. Vulnerability Details CVEID:CVE-2018-20676 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper...

6.1CVSS6.4AI score0.03929EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/26 9:58 p.m.40 views

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-20677)

Summary Bootstrap is used by IBM Storage Ceph as a CSS framework. CVE-2018-20677 This bulletin identifies the steps to take to address the vulnerability in Bootstrap. Vulnerability Details CVEID:CVE-2018-20677 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper...

6.1CVSS6.4AI score0.04081EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/26 9:58 p.m.38 views

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-14041)

Summary Bootstrap is used by IBM Storage Ceph as a CSS framework. CVE-2018-14041 This bulletin identifies the steps to take to address the vulnerability in Bootstrap. Vulnerability Details CVEID:CVE-2018-14041 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper...

6.1CVSS6.3AI score0.04293EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/18 9:15 p.m.39 views

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross Site Scripting') in Bootstrap (CVE-2018-20676)

Summary Bootstrap is used by IBM Storage Ceph as a CSS framework. CVE-2018-20676 This bulletin identifies the steps to take to address the vulnerability in Bootstrap. Vulnerability Details CVEID: CVE-2018-20676 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper...

6.1CVSS6.6AI score0.03929EPSS
Exploits0Affected Software1
Rows per page
Query Builder