Lucene search
K

2341 matches found

OSV
OSV
added 2021/11/08 5:54 p.m.25 views

GHSA-MW6Q-98MP-G8G8 Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.1AI score0.02332EPSS
Exploits1References9
CNVD
CNVD
added 2021/11/08 12:0 a.m.21 views

Bootstrap-Table has an unspecified vulnerability

Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...

6.1CVSS4.3AI score0.02332EPSS
Exploits1References1
CNVD
CNVD
added 2021/11/08 12:0 a.m.19 views

Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

9.8CVSS2.8AI score0.15806EPSS
Exploits3References1
CNVD
CNVD
added 2021/11/08 12:0 a.m.25 views

Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...

4.3CVSS1.2AI score0.03792EPSS
Exploits3References1
CNVD
CNVD
added 2021/11/08 12:0 a.m.18 views

Sourcecodester Online Event Booking and Reservation System Cross-Site Scripting Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation...

5.4CVSS0.9AI score0.01647EPSS
Exploits5References1
CNVD
CNVD
added 2021/11/08 12:0 a.m.33 views

FastAdmin has a file upload vulnerability

FastAdmin is an extremely fast backend development framework based on ThinkPHP and Bootstrap.FastAdmin is vulnerable to file upload. An attacker can use this vulnerability to gain server privileges...

2.6AI score
Exploits0
Veracode
Veracode
added 2021/11/05 4:45 a.m.15 views

Cross-site Scripting (XSS)

bootstrap-table is vulnerable to cross-site scripting. Lack of input sanitization in the escapeHTML function of index.js allows an attacker to inject and execute malicious javascript even if the escape attribute is set...

6.1CVSS2AI score0.02332EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2021/11/03 6:15 p.m.13 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS0.02332EPSS
Exploits1References7
OSV
OSV
added 2021/11/03 6:15 p.m.15 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score
Exploits0References7
UbuntuCve
UbuntuCve
added 2021/11/03 6:15 p.m.23 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.6AI score0.02332EPSS
Exploits1References1
OSV
OSV
added 2021/11/03 6:15 p.m.3 views

UBUNTU-CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score0.02332EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/11/03 5:25 p.m.14 views

CVE-2021-23472 Cross-site Scripting (XSS)

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.4AI score0.02332EPSS
Exploits1References7
CVE
CVE
added 2021/11/03 5:25 p.m.75 views

CVE-2021-23472

CVE-2021-23472 affects versions before 1.19.1 of the bootstrap-table package. The vulnerability is a type confusion that can bypass input sanitization when escapeHTML receives an array instead of a string, even if escape is enabled. Several connected sources (NVD, OSV, GHSA) corroborate the exist...

6.1CVSS4.9AI score0.02332EPSS
Exploits1References7Affected Software1
CNVD
CNVD
added 2021/11/03 12:0 a.m.15 views

xujinliang zibbs cross-site scripting vulnerability

Zibbs Zibbs Forum is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute...

9.6CVSS4.2AI score0.01316EPSS
Exploits1References1
CNVD
CNVD
added 2021/11/03 12:0 a.m.17 views

zibbs cross-site scripting vulnerability

zibbs is a php light forum system developed on bootstrap. zibbs version 1.0 has a cross-site scripting vulnerability in application/controllers/AdminController.php. An attacker can exploit this vulnerability to execute arbitrary code via the bbsmeta parameter...

9.6CVSS4.3AI score0.01316EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/03 12:0 a.m.3 views

Bootstrap-Table 跨站脚本漏洞

Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...

6.1CVSS5.6AI score0.02332EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2021/11/03 12:0 a.m.4 views

PT-2021-5669 · Unknown · Bootstrap-Table

Name of the Vulnerable Software and Affected Versions: bootstrap-table versions prior to 1.19.1 Description: A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is...

6.1CVSS6.1AI score0.02332EPSS
Exploits1References18
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:0 a.m.12 views

Out-of-Date Bootstrap Detected

An out-of-date version of Bootstrap has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

7.6AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:0 a.m.55 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : ipa Multiple Vulnerabilities (NS-SA-2021-0171)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ipa packages installed that are affected by multiple vulnerabilities: - jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causin...

6.9CVSS6.6AI score0.99019EPSS
Exploits17References21
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/22 4:31 p.m.29 views

Security Bulletin: Vulnerabilities in Urllib3 and react-bootstrap-table affect IBM Spectrum Discover.

Summary Vulnerabilities in Urllib3 and react-bootstrap-table such as problems on the regular expression cause denial of service, improper validations in parameters and problems related to cross-site scripting, may affect IBM Spectrum Discover. Vulnerability Details CVEID: CVE-2021-33503...

7.5CVSS2AI score0.03273EPSS
Exploits1Affected Software1
Rows per page
Query Builder