Lucene search
+L

2936 matches found

Amazon
Amazon
•added 2024/03/21 12:00 a.m.•13 views

Important: javapackages-bootstrap

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

8.1CVSS8.2AI score0.00441EPSS
SaveExploits0
Amazon
Amazon
•added 2024/03/21 12:00 a.m.•13 views

Important: javapackages-bootstrap

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

8.1CVSS6.9AI score0.00441EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/03/21 12:00 a.m.•35 views

Amazon Linux 2023 : javapackages-bootstrap (ALAS2023-2024-561)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-561 advisory. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to...

8.1CVSS6.3AI score0.00441EPSS
SaveExploits0References4
CBLMariner
CBLMariner
•added 2024/03/19 5:21 p.m.•35 views

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

5.5CVSS5.5AI score0.00266EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2024/03/19 5:21 p.m.•21 views

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15. A patched version of the package is available...

5.5CVSS6.3AI score0.00847EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2024/03/19 5:21 p.m.•27 views

CVE-2023-37460 affecting package javapackages-bootstrap for versions less than 1.5.0-4

CVE-2023-37460 affecting package javapackages-bootstrap for versions less than 1.5.0-4. A patched version of the package is available...

9.8CVSS9.6AI score0.02482EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2024/03/19 5:21 p.m.•28 views

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

5.5CVSS5.7AI score0.0042EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2024/03/08 12:00 a.m.•22 views

Fedora: Security Advisory for javapackages-bootstrap (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02352EPSS
SaveExploits3References2
OSV
OSV
•added 2024/03/06 11:10 a.m.•70 views

BIT-TYPO3-2021-21365

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custo...

5.4CVSS5.4AI score0.00941EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 11:03 a.m.•45 views

BIT-POSTGRESQL-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with...

8.8CVSS7.6AI score0.01676EPSS
SaveExploits0References30
Patchstack
Patchstack
•added 2024/03/04 12:00 a.m.•19 views

WordPress Ultimate Bootstrap Elements for Elementor Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Bootstrap Elements for Elementor Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1398 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ba7f512c3fec Credit...

6.4CVSS5.8AI score0.00506EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2024/03/02 1:15 p.m.•29 views

Cross site scripting

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headingtitletag’ and ’headingsubtitletag’ parameters in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it...

5.5CVSS6.1AI score0.00506EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/02 12:39 p.m.•97 views

CVE-2024-1398

CVE-2024-1398 affects the Ultimate Bootstrap Elements for Elementor plugin for WordPress. The vulnerability is Stored Cross-Site Scripting via the heading_title_tag and heading_sub_title_tag parameters in all versions up to 1.3.6, caused by insufficient input sanitization and output escaping. The...

6.4CVSS5.8AI score0.00506EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/02 12:00 a.m.•33 views

PT-2024-18009 · WordPress · The Ultimate Bootstrap Elements For Elementor

Name of the Vulnerable Software and Affected Versions: The Ultimate Bootstrap Elements for Elementor plugin for WordPress versions up to, and including, 1.3.6 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

6.4CVSS7.9AI score0.00506EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/03/02 12:00 a.m.•19 views

WordPress Plugin Ultimate Bootstrap Elements for Elementor Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS8.4AI score0.00506EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/02 12:00 a.m.•8 views

CVE-2024-1398: Improper Neutralization of Input During Web Page Generation

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headingtitletag’ and ’headingsubtitletag’ parameters in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6AI score0.00506EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/19 9:15 a.m.•16 views

AZL-34812 CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue...

5.5CVSS6.6AI score0.00441EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/02/17 3:24 a.m.•12 views

SUSE CVE-2023-32189

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

5.9CVSS6.8AI score0.00146EPSS
SaveExploits0References5
Openbugbounty
Openbugbounty
•added 2024/02/11 11:46 a.m.•13 views

bootstrap-template.com Cross Site Scripting vulnerability OBB-3851444

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/01/29 12:00 a.m.•9 views

Red Hat Shim Security Breach

Red Hat Shim is a simple software package from Red Hat. It is intended to be used as a first-stage boot loader on UEFI systems. A security vulnerability exists in Red Hat Shim. An attacker exploiting this vulnerability could cause memory corruption and possibly lead to a bootstrap crash or data...

7.4CVSS8.7AI score0.00436EPSS
SaveExploits0References4
Rows per page
Query Builder