com.amashchenko.struts2.actionflow:struts2-actionflow-plugin (2.4.0), com.amashchenko.struts2.actionflow:struts2-actionflow-showcase (2.4.0) +62 more potentially affected by CVE-2016-4438 via org.apache.struts:struts2-core (>=2.3.20, <=2.3.28.1)

org.apache.struts:struts2-core MAVEN version =2.3.20, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =2.0.1, =2.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - com.weicoder:frame 1.1.0 and more Source cves: CVE-2016-4438 Source advisory: OSV:GHSA-4PRJ-VW9J-V6PR...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: OSV:GHSA-876P-4WGC-75RX...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: GHSA-876P-4WGC-75RX...

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

@7ninjas/scss-mixins (1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +247 more potentially affected by CVE-2018-14040 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =0.0.16, =0.0.1, =1.0.0, =2.0.0-alpha, =2.3.2, =1.0.0, =1.0.3 - @evoxmusic/angular 0.7.5 and more Source cves: CVE-2018-14040 Source advisory: GHSA-3WQF-4X89-9G79...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-14040 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-14040 Source advisory: GHSA-3WQF-4X89-9G79...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2018-14040 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-14040 Source advisory: OSV:GHSA-3WQF-4X89-9G79...

@7ninjas/scss-mixins (1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +247 more potentially affected by CVE-2018-14040 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =0.0.16, =0.0.1, =1.0.0, =2.0.0-alpha, =2.3.2, =1.0.0, =1.0.3 - @evoxmusic/angular 0.7.5 and more Source cves: CVE-2018-14040 Source advisory: OSV:GHSA-3WQF-4X89-9G79...

GHSA-3WQF-4X89-9G79 Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

Jfinal CMS Command Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, and load balancing. A security vulnerability exists in the F5 BIG-IP that stems from a lack of integrity checking in the F5 BIG-IP bootstrap configuration when...

CVE-2022-1452

Out-of-bounds Read in rbinjavabootstrapmethodsattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

UBUNTU-CVE-2022-1452

Out-of-bounds Read in rbinjavabootstrapmethodsattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

PT-2022-13897

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0 Description The issue is related to an out-of-bounds read in the r bin java bootstrap methods attr new function. This bug causes the program to read data past the end of the intended buffer, potentially allowing...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2022-73141)

Bootstrap is a web front-end framework developed using HTML, CSS, and JavaScript. Bootstrap versions v3.1.11 and v3.3.7 are vulnerable to a cross-site scripting vulnerability that originates in the Title parameter in /vendor/views/addproduct.php. An attacker could exploit this vulnerability to...

net.avcompris.commons:avc-guixer-core (>=0.0.1, <=0.0.5), org.ligoj.bootstrap:bootstrap-web-test (>=1.7.6, <=2.1.1) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.6.0)

org.seleniumhq.selenium:selenium-server MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.avcompris.commons:avc-guixer-core =0.0.1, =1.7.6, =2.1.1 Source cves:...

com.wiley:teasy (>=1.0.0-beta, <=1.0.23-beta), org.ligoj.bootstrap:bootstrap-web-test (>=1.6.0, <=1.7.2) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.2.0)

org.seleniumhq.selenium:selenium-server MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.wiley:teasy =1.0.0-beta, =1.6.0, =1.7.2 Source cves: CVE-2022-28108 Source...

Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-81357)

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...