Lucene search
+L

3262 matches found

CNNVD
CNNVD
•added 2021/11/16 12:00 a.m.•22 views

Apache ShenYu authorization issue vulnerability

Apache ShenYu is an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation.An authorization issue vulnerability exists in Apache ShenYu Admin, which stems from a misuse of JWT in ShenuAdminBootstrap allowing an attacker to bypass authentication. No...

9.8CVSS5.6AI score0.4212EPSS
SaveExploits3References3
Chainguard
Chainguard
•added 2021/11/15 5:45 p.m.•12 views

GHSA-5XP3-JFQ3-5Q8X vulnerabilities

Vulnerabilities for packages: pypy-bootstrap...

7.3AI score
SaveExploits0
Chainguard
Chainguard
•added 2021/11/10 6:15 p.m.•22 views

CVE-2021-3572 vulnerabilities

Vulnerabilities for packages: pypy-bootstrap...

5.7CVSS7.1AI score0.01829EPSS
SaveExploits2
osv_ghsa
osv_ghsa
•added 2021/11/08 5:54 p.m.•76 views

GHSA-MW6Q-98MP-G8G8 Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.1AI score0.02409EPSS
SaveExploits1References9
vulnersOsv
vulnersOsv
•added 2021/11/08 5:54 p.m.•10 views

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: OSV:GHSA-MW6Q-98MP-G8G8...

6.1CVSS6.3AI score0.02409EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/11/08 5:54 p.m.•72 views

Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS2.7AI score0.02409EPSS
SaveExploits1References9Affected Software1
vulnersOsv
vulnersOsv
•added 2021/11/08 5:54 p.m.•4 views

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: GHSA-MW6Q-98MP-G8G8...

6.1CVSS0.02409EPSS
SaveExploits1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•85 views

Bootstrap-Table has an unspecified vulnerability

Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...

6.1CVSS4.3AI score0.02409EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•102 views

Sourcecodester Online Event Booking and Reservation System Cross-Site Scripting Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation...

5.4CVSS0.9AI score0.01674EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•81 views

Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...

4.3CVSS1.2AI score0.03852EPSS
SaveExploits3References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•78 views

Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

9.8CVSS2.8AI score0.16173EPSS
SaveExploits3References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•80 views

FastAdmin has a file upload vulnerability

FastAdmin is an extremely fast backend development framework based on ThinkPHP and Bootstrap.FastAdmin is vulnerable to file upload. An attacker can use this vulnerability to gain server privileges...

2.6AI score
SaveExploits0
Veracode
Veracode
•added 2021/11/05 4:45 a.m.•23 views

Cross-site Scripting (XSS)

bootstrap-table is vulnerable to cross-site scripting. Lack of input sanitization in the escapeHTML function of index.js allows an attacker to inject and execute malicious javascript even if the escape attribute is set...

6.1CVSS2AI score0.02409EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2021/11/03 6:15 p.m.•29 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score
SaveExploits0References7
NVD
NVD
•added 2021/11/03 6:15 p.m.•28 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS0.02409EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2021/11/03 6:15 p.m.•37 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.6AI score0.02409EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2021/11/03 6:15 p.m.•26 views

UBUNTU-CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS6.7AI score0.02409EPSS
SaveExploits1References2
CVE
CVE
•added 2021/11/03 5:25 p.m.•106 views

CVE-2021-23472

CVE-2021-23472 affects versions before 1.19.1 of the bootstrap-table package. The vulnerability is a type confusion that can bypass input sanitization when escapeHTML receives an array instead of a string, even if escape is enabled. Several connected sources (NVD, OSV, GHSA) corroborate the exist...

6.1CVSS4.9AI score0.02409EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2021/11/03 5:25 p.m.•6 views

CVE-2021-23472

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

6.1CVSS0.02409EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/11/03 5:25 p.m.•37 views

CVE-2021-23472 Cross-site Scripting (XSS)

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

3.1CVSS6.4AI score0.02409EPSS
SaveExploits1References7
Rows per page
Query Builder