Lucene search
+L

2433 matches found

Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.16 views

Bootstrap < 2.1.0 Cross-Site Scripting

According to its self-reported version number, Bootstrap is prior to 2.1.0. Therefore, it may be affected by a Cross-Site Scripting XSS vulnerability via html option for popovers/tooltips which is unescaped when grabbed with jQuery's .attr method. Note that the scanner has not tested for these...

6.1AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.103 views

Bootstrap 4.0.0 < 4.1.2 Cross-Site Scripting

According to its self-reported version number, Bootstrap is at least 4.0.0 and prior to 4.1.2. Therefore, it may be affected by a Cross-Site Scripting XSS vulnerability via the tooltip, collapse and scrollspy plugins. Note that the scanner has not tested for these issues but has instead relied on...

6.1CVSS6.1AI score0.04293EPSS
SaveExploits3References4
Kitploit
Kitploit
added 2018/09/23 12:44 p.m.175 views

Nmap Bootstrap XSL - A Nmap XSL Implementation With Bootstrap

A Nmap XSL implementation with Bootstrap. How to use Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan. For example: nmap -sS -T4 -A -sC -oA scanme --stylesheet https://raw.githubusercontent.com/honze-net/nmap-bootstrap-xsl/master/nmap-bootstrap.xsl scanme.nmap.org scanme2.nmap.org Open...

7.2AI score
SaveExploits0References2
OSV
OSV
added 2018/09/13 3:50 p.m.7 views

GHSA-7MVR-5X2G-WFC8 Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.9AI score0.04009EPSS
SaveExploits1References25
Github Security Blog
Github Security Blog
added 2018/09/13 3:50 p.m.426 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.4AI score0.04009EPSS
SaveExploits1References24Affected Software5
Github Security Blog
Github Security Blog
added 2018/09/13 3:49 p.m.492 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042...

6.1CVSS6.3AI score0.04293EPSS
SaveExploits1References23Affected Software6
OSV
OSV
added 2018/09/13 3:49 p.m.6 views

GHSA-PJ7M-G53M-7638 Bootstrap Cross-site Scripting vulnerability

In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042...

6.1CVSS6.7AI score0.04293EPSS
SaveExploits1References23
RubySec
RubySec
added 2018/09/13 12:0 a.m.45 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.1AI score0.04293EPSS
SaveExploits2References1Affected Software1
RubySec
RubySec
added 2018/09/13 12:0 a.m.36 views

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.3AI score0.04293EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
added 2018/09/13 12:0 a.m.42 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.1AI score0.04293EPSS
SaveExploits2References1Affected Software1
Veracode
Veracode
added 2018/07/30 8:45 a.m.10 views

Cross-Site Scripting (XSS)

bootstrap is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the parameters, allowing a malicious user to inject and execute arbitrary Javascript...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2018/07/28 10:33 p.m.258 views

sRDI - Shellcode Implementation Of Reflective DLL Injection

sRDI allows for the conversion of DLL files to position independent shellcode. Functionality is accomplished via two components: C project which compiles a PE loader implementation RDI to shellcode Conversion code which attaches the DLL, RDI, and user data together with a bootstrap This project i...

8AI score
SaveExploits0References1
CNVD
CNVD
added 2018/07/17 12:0 a.m.18 views

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2018-13371)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the data-container attribute of tooltip in versions of Bootstrap prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web...

6.1CVSS6.3AI score0.04009EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/17 12:0 a.m.16 views

Bootstrap cross-site scripting vulnerability (CNVD-2018-13372)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the collapse data-parent attribute in Bootstrap versions prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

6.1CVSS6.3AI score0.04135EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/17 12:0 a.m.17 views

Bootstrap Cross-Site Scripting Vulnerability

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the data-target attribute of scrollspy in Bootstrap versions prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web scrip...

6.1CVSS6.2AI score0.04293EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2018/07/16 11:20 p.m.55 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS1.6AI score0.04009EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/07/16 10:48 p.m.43 views

CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS2.1AI score0.04135EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/07/13 2:29 p.m.46 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.7AI score0.04009EPSS
SaveExploits1References5
OSV
OSV
added 2018/07/13 2:29 p.m.11 views

AZL-44094 CVE-2018-14042 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.7AI score0.04009EPSS
SaveExploits1References1
NVD
NVD
added 2018/07/13 2:29 p.m.30 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.3AI score0.04009EPSS
SaveExploits1References17
Rows per page
Query Builder