3263 matches found
jfinal cms security vulnerability
jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework . jfinal cms v5.1.0 version of a security vulnerability , the source of the...
K000133673: Bootstrap vulnerability CVE-2016-10735
Security Advisory Description In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. CVE-2016-10735 Impact An attacker may exploit this vulnerability to perform a cross-site scripting XSS attack...
F5 Networks BIG-IP : Bootstrap vulnerability (K05380109)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K05380109 advisory. In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.CVE-2018-14041ImpactAn attacker...
CVE-2022-33294
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
Fedora: Security Advisory for rubygem-railties (FEDORA-2023-7002afbbb8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: There are several vulnerabilities in Bootstrap used by IBM Maximo Asset Management
Summary There are several vulnerabilities in Bootstrap used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2018-14040 DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the collapse data-parent attribute. A remote...
CVE-2022-33294 NULL pointer dereference in Modem
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
CVE-2022-33294
CVE-2022-33294 affects Qualcomm modem software where a NULL pointer dereference during processing of an lwm2m registration/update/bootstrap response leads to a transient denial-of-service. The impact is a crash or service disruption on the modem; CVSSv3.1 base score 7.5 (Network, Low attack compl...
PT-2023-13298 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS in the Modem due to a NULL pointer dereference. This occurs while receiving a response to an lwm2m registration, update, or bootstrap request message...
@dankapusta/angular-bootstrap-calendar (0.20.1), @flagbit/ggm-components (0.9.11) +95 more potentially affected by CVE-2023-26118 via angular-touch (>=1.6.2, <=1.8.3)
angular-touch NPM version =1.6.2, =0.13.6, =0.1.0, =1.0.5, =3.0.0, =2.4.0, =1.3.0, =2.3.0, =2.3.2 - @w20/w20-dataviz 2.3.0 - @w20/w20-extras 2.3.0 - @w20/w20-material 2.2.0 and more Source cves: CVE-2023-26118 Source advisory: MEND:CVE-2023-26118...
an-website (>=22.12.28, <=23.2.6), anoteai (>=0.10.0, <=0.20.0) +24 more potentially affected by CVE-2023-28858 via redis (>=4.4.0, <=4.4.2)
redis PYPI version =4.4.0, =22.12.28, =0.10.0, =0.8.2, =0.1.17, =0.0.10, =0.5.0rc1, =0.0.122, =0.104.0rc1, =0.7.2rc1, =0.31.0, =1.0.2, =0.4.8, =0.4.9 and more Source cves: CVE-2023-28858 Source advisory: GHSA-24WV-MV5M-XV4H...
CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-12
CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-12. A patched version of the package is available...
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.32-alt1
3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - .NET Core 3.1.32 and .NET Core SDK 3.1.426 releases - CVE-2022-41089: .NET Remote Code Execution Vulnerability - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial o...
Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 7.0.3-alt1
7.0.3-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - The .NET 7.0.3 and .NET SDK 7.0.103 releases - CVE-2023-21808: .NET Remote Code Execution Vulnerability...
Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.17-alt1
5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...
GHSA-VPQV-MQVC-PCX2 Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails
The twitter-bootstrap-rails Gem for Rails contains a flaw that enables a reflected cross-site scripting XSS attack. This flaw exists because the bootstrapflash helper method does not validate input when handling flash messages before returning it to users. This may allow a context-dependent...
Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails
The twitter-bootstrap-rails Gem for Rails contains a flaw that enables a reflected cross-site scripting XSS attack. This flaw exists because the bootstrapflash helper method does not validate input when handling flash messages before returning it to users. This may allow a context-dependent...
PT-2023-10179
Name of the Vulnerable Software and Affected Versions twitter-bootstrap-rails Gem for Rails affected versions not specified Description The issue allows for a reflected cross-site scripting XSS attack due to the bootstrap flash helper method not validating input when handling flash messages. This...
