3258 matches found
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the collapse data-parent attribute...
CVE-2018-14040: Improper Neutralization of Input During Web Page Generation
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041: Improper Neutralization of Input During Web Page Generation
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
PT-2018-3486
Name of the Vulnerable Software and Affected Versions: Bootstrap versions prior to 4.1.2 Description: The issue is related to the ScrollSpy plugin in Bootstrap, where a lack of protection in the web page structure allows for cross-site scripting XSS attacks. This can be exploited by a remote...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-target property of scrollspy...
PT-2018-12295
Name of the Vulnerable Software and Affected Versions Bootstrap versions 2.3.0 through 3.4.0 Bootstrap versions 4.0.0 through 4.1.1 Description The issue allows for XSS in the collapse data-parent attribute. Recommendations For Bootstrap versions 2.3.0 through 3.4.0, update to version 3.4.0 or...
PT-2018-12296
Name of the Vulnerable Software and Affected Versions Bootstrap versions 2.3.0 through 4.1.1 Description The issue allows for XSS in the data-container property of tooltip. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
PT-2018-19498
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
PT-2018-19499
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
PT-2018-19500
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14042: Improper Neutralization of Input During Web Page Generation
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-container property of tooltip...
XSS vulnerabilities via data-parent, data-target, data-container in bootstrap
In Bootstrap before 4.1.2, XSS is possible in collapse data-parent attribute CVE-2018-14040, data-target property of scrollspy CVE-2018-14041, data-container property of tooltip CVE-2018-14042...
PBC denial of service vulnerability
PBC is a Google protocol buffer library written in C. A denial of service vulnerability exists in the 'pbcBregisterfields' function in the bootstrap.c file of the libpbc.a static link library in PBC 2017-03-02 and earlier versions. An attacker can exploit this vulnerability to cause a denial of...
