Lucene search
+L

53 matches found

Cvelist
Cvelist
added 2023/09/05 8:02 p.m.47 views

CVE-2023-39514 Stored Cross-site Scripting on graphs.php data template formated name view in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS7.2AI score0.00874EPSS
SaveExploits1References5
OSV
OSV
added 2023/09/05 8:02 p.m.46 views

CVE-2023-39514 Stored Cross-site Scripting on graphs.php data template formated name view in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.5AI score
SaveExploits0References7
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.311 views

K24383845: Bootstrap vulnerability CVE-2019-8331

Security Advisory Description In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. CVE-2019-8331 Impact An attacker can inject a malicious script into a client browser. Additionally, an attacker can trick a user into running maliciou...

6.1CVSS6.4AI score0.16404EPSS
SaveExploits3Affected Software13
RedHat Linux
RedHat Linux
added 2023/01/31 1:18 p.m.13 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.18 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.9 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:12 p.m.10 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2022/12/07 7:19 p.m.25 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2022/11/28 2:39 p.m.10 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/12/16 1:53 p.m.13 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:39 a.m.46 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:31 a.m.10 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/09/29 9:12 p.m.8 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/08/04 2:02 p.m.12 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2019/10/10 3:39 p.m.11 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.4AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2019/10/10 3:38 p.m.8 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.4AI score0.16404EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2019/06/11 3:32 p.m.8 views

bootstrap: XSS in the tooltip or popover data-template attribute

A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired...

6.1CVSS6.4AI score0.16404EPSS
SaveExploits3References4
Typo3
Typo3
added 2019/05/07 12:00 a.m.90 views

Cross-Site Scripting in Bootstrap CSS toolkit before 3.4.1 and 4.3.0

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, cross-site scripting is possible in the tooltip or popover data-template attribute...

4.3CVSS1.4AI score0.16404EPSS
SaveExploits3Affected Software1
OSV
OSV
added 2019/02/22 8:54 p.m.20 views

GHSA-9V3M-8FP8-MJ99 Bootstrap Vulnerable to Cross-Site Scripting

Versions of bootstrap prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting XSS. The data-template attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript. Recommendation For bootstrap 4.x upgrade to...

6.1CVSS6.9AI score0.16404EPSS
SaveExploits3References45
Github Security Blog
Github Security Blog
added 2019/02/22 8:54 p.m.537 views

Bootstrap Vulnerable to Cross-Site Scripting

Versions of bootstrap prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting XSS. The data-template attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript. Recommendation For bootstrap 4.x upgrade to...

6.1CVSS6.5AI score0.16404EPSS
SaveExploits3References44Affected Software7
Rows per page
Query Builder