Lucene search
+L

14044 matches found

RedHat Linux
RedHat Linux
added 2021/11/09 6:30 p.m.9 views

libsepol: use-after-free in __cil_verify_classperms()

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

3.3CVSS6.8AI score0.00457EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/11/09 5:26 p.m.17 views

kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS

A denial-of-service DoS flaw was identified in the Linux kernel due to an incorrect memory barrier in xtreplacetable in net/netfilter/xtables.c in the netfilter subsystem...

5.5CVSS6.7AI score0.00437EPSS
SaveExploits0References5
OSV
OSV
added 2021/11/08 9:15 p.m.14 views

CVE-2021-40261

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the 1 userusername and 2 category parameters in saveclass.php, the 3 firstname, 4 class, and 5 status parameters in studenttable.php, the 6 category and 7 classname parameters in...

6.1CVSS6.4AI score0.00662EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
added 2021/11/08 5:54 p.m.4 views

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: OSV:GHSA-MW6Q-98MP-G8G8...

6.1CVSS6.3AI score0.02409EPSS
SaveExploits1
OSV
OSV
added 2021/11/08 5:54 p.m.69 views

GHSA-MW6Q-98MP-G8G8 Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.1AI score0.02409EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2021/11/08 5:54 p.m.62 views

Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS2.7AI score0.02409EPSS
SaveExploits1References9Affected Software1
CNVD
CNVD
added 2021/11/08 12:00 a.m.76 views

Bootstrap-Table has an unspecified vulnerability

Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...

6.1CVSS4.3AI score0.02409EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/11/08 12:00 a.m.19 views

Mozilla Firefox Security Advisory (MFSA2016-23) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

8.8CVSS9.4AI score0.30946EPSS
SaveExploits8References3
Veracode
Veracode
added 2021/11/05 4:45 a.m.20 views

Cross-site Scripting (XSS)

bootstrap-table is vulnerable to cross-site scripting. Lack of input sanitization in the escapeHTML function of index.js allows an attacker to inject and execute malicious javascript even if the escape attribute is set...

6.1CVSS2AI score0.02409EPSS
SaveExploits1References2Affected Software1
FreeBSD
FreeBSD
added 2021/11/04 12:00 a.m.37 views

go -- multiple vulnerabilities

The Go project reports: debug/macho fails out when loading a file that contains a dynamic symbol table command that indicates a larger number of symbols than exist in the loaded symbol table. Previously, opening a zip with Reader.Open could result in a panic if the zip contained a file whose name...

7.8AI score
SaveExploits0References2
OSV
OSV
added 2021/11/03 6:15 p.m.22 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score
SaveExploits0References7
NVD
NVD
added 2021/11/03 6:15 p.m.22 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS0.02409EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2021/11/03 6:15 p.m.32 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.6AI score0.02409EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/03 6:15 p.m.17 views

UBUNTU-CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score0.02409EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/11/03 5:25 p.m.25 views

CVE-2021-23472 Cross-site Scripting (XSS)

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.4AI score0.02409EPSS
SaveExploits1References7
CVE
CVE
added 2021/11/03 5:25 p.m.91 views

CVE-2021-23472

CVE-2021-23472 affects versions before 1.19.1 of the bootstrap-table package. The vulnerability is a type confusion that can bypass input sanitization when escapeHTML receives an array instead of a string, even if escape is enabled. Several connected sources (NVD, OSV, GHSA) corroborate the exist...

6.1CVSS4.9AI score0.02409EPSS
SaveExploits1References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/03 5:21 p.m.7 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.6AI score0.02409EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2021/11/03 12:00 a.m.12 views

PT-2021-5669 · Unknown · Bootstrap-Table

Name of the Vulnerable Software and Affected Versions: bootstrap-table versions prior to 1.19.1 Description: A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is...

6.1CVSS6.1AI score0.02409EPSS
SaveExploits1References18
CNNVD
CNNVD
added 2021/11/03 12:00 a.m.10 views

Bootstrap-Table 跨站脚本漏洞

Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...

6.1CVSS5.6AI score0.02409EPSS
SaveExploits1References7
OSV
OSV
added 2021/11/02 7:49 a.m.17 views

ALBA-2021:4061 NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

7.2AI score
SaveExploits0
Rows per page
Query Builder