3258 matches found
Bitdefender BOX 2 bootstrap update_setup command execution vulnerability
Summary An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution o...
bootstrap Cross-site Scripting vulnerability
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-20677 via bootstrap (>=3.1.1, <=3.3.7)
bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20677 Source advisory: GHSA-PH58-4VRJ-W6HR...
@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +152 more potentially affected by CVE-2018-20677 via bootstrap-sass (>=3.1.1, <=3.3.7)
bootstrap-sass NPM version =3.1.1, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20677 Source advisory: GHSA-PH58-4VRJ-W6HR...
de.agilecoders.wicket:wicket-bootstrap-core (>=0.8.0, <=0.8.1), de.agilecoders.wicket:wicket-bootstrap-extensions (>=0.8.0, <=0.8.1) +7 more potentially affected by CVE-2018-20677 via org.webjars:bootstrap (2.3.1)
org.webjars:bootstrap MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - de.agilecoders.wicket:wicket-bootstrap-core =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.7.0, =0.2.0, =0.2.1, =1.4.3, =1.4.6...
de.agilecoders.wicket:wicket-bootstrap-core (>=0.8.2, <=0.8.3), de.agilecoders.wicket:wicket-bootstrap-extensions (>=0.8.2, <=0.8.3) +3 more potentially affected by CVE-2018-20677 via org.webjars:bootstrap (2.3.1-1)
org.webjars:bootstrap MAVEN version 2.3.1-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - de.agilecoders.wicket:wicket-bootstrap-core =0.8.2, =0.8.2, =0.8.2, =0.8.2, =3.1.1, =3.1.1-1 Source cves:...
org.webjars:bootstrap-tour (>=0.10.2-1, <=0.12.0), org.webjars:jasny-bootstrap (>=2.3.0-j5, <=2.3.0-j5-1) potentially affected by CVE-2018-20677 via org.webjars:bootstrap (2.3.0)
org.webjars:bootstrap MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - org.webjars:bootstrap-tour =0.10.2-1, =2.3.0-j5, =2.3.0-j5-1 Source cves: CVE-2018-20677 Source advisory:...
@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-20677 via bootstrap (>=3.1.1, <=3.3.7)
bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20677 Source advisory: OSV:GHSA-PH58-4VRJ-W6HR...
@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +152 more potentially affected by CVE-2018-20677 via bootstrap-sass (>=3.1.1, <=3.3.7)
bootstrap-sass NPM version =3.1.1, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20677 Source advisory: OSV:GHSA-PH58-4VRJ-W6HR...
GHSA-PH58-4VRJ-W6HR bootstrap Cross-site Scripting vulnerability
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-20676 via bootstrap (>=3.1.1, <=3.3.7)
bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20676 Source advisory: OSV:GHSA-3MGP-FX93-9XV5...
@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +152 more potentially affected by CVE-2018-20676 via bootstrap-sass (>=3.1.1, <=3.3.7)
bootstrap-sass NPM version =3.1.1, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20676 Source advisory: OSV:GHSA-3MGP-FX93-9XV5...
GHSA-3MGP-FX93-9XV5 XSS vulnerability that affects bootstrap
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
org.webjars:bootstrap-tour (>=0.10.2-1, <=0.12.0), org.webjars:jasny-bootstrap (>=2.3.0-j5, <=2.3.0-j5-1) potentially affected by CVE-2018-20676 via org.webjars:bootstrap (2.3.0)
org.webjars:bootstrap MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - org.webjars:bootstrap-tour =0.10.2-1, =2.3.0-j5, =2.3.0-j5-1 Source cves: CVE-2018-20676 Source advisory:...
de.agilecoders.wicket:wicket-bootstrap-core (>=0.8.0, <=0.8.1), de.agilecoders.wicket:wicket-bootstrap-extensions (>=0.8.0, <=0.8.1) +7 more potentially affected by CVE-2018-20676 via org.webjars:bootstrap (2.3.1)
org.webjars:bootstrap MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - de.agilecoders.wicket:wicket-bootstrap-core =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.7.0, =0.2.0, =0.2.1, =1.4.3, =1.4.6...
de.agilecoders.wicket:wicket-bootstrap-core (>=0.8.2, <=0.8.3), de.agilecoders.wicket:wicket-bootstrap-extensions (>=0.8.2, <=0.8.3) +3 more potentially affected by CVE-2018-20676 via org.webjars:bootstrap (2.3.1-1)
org.webjars:bootstrap MAVEN version 2.3.1-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - de.agilecoders.wicket:wicket-bootstrap-core =0.8.2, =0.8.2, =0.8.2, =0.8.2, =3.1.1, =3.1.1-1 Source cves:...
@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-20676 via bootstrap (>=3.1.1, <=3.3.7)
bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20676 Source advisory: GHSA-3MGP-FX93-9XV5...
@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +152 more potentially affected by CVE-2018-20676 via bootstrap-sass (>=3.1.1, <=3.3.7)
bootstrap-sass NPM version =3.1.1, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20676 Source advisory: GHSA-3MGP-FX93-9XV5...
XSS vulnerability that affects bootstrap
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +153 more potentially affected by CVE-2016-10735 via bootstrap-sass (>=2.3.2, <=3.3.7)
bootstrap-sass NPM version =2.3.2, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2016-10735 Source advisory: OSV:GHSA-4P24-VMCR-4GQJ...