Malicious code in bootstrap-base-nabtrade-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a0e5845f40b62d90db60f5e314718040e0b4c55bc03ed1030ed07a657434fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1649 Malicious code in bootstrap-base-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760d8c5ed6a114aed28f436abbc108545863ce35e8d55e458705604df218419f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logi-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6ddc969c3ee3a92a778090198117b0c40386a5c6268f77e3a5c26869905989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4379 Malicious code in logi-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6ddc969c3ee3a92a778090198117b0c40386a5c6268f77e3a5c26869905989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a4dad53fa20e397c9d6fec72443b8465639a83bd580c0228e42a08a849a32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5498 Malicious code in ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a4dad53fa20e397c9d6fec72443b8465639a83bd580c0228e42a08a849a32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5502 Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ea0ed6eb9e952555479abaffce89b9ec1fabf26dab71f7e5fff8cf1b0ed57a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6223 Malicious code in sp-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ea0ed6eb9e952555479abaffce89b9ec1fabf26dab71f7e5fff8cf1b0ed57a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-9266-J9V3-Q4J5 Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

CVE-2022-32563

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

CVE-2022-32563

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

CVE-2022-32563

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

PYSEC-2022-207

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

Design/Logic Flaw

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...

Cross-site Scripting in Bootstrap-3-Typeahead

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter function. An attacker could exploit this via user interaction to execute code in the user's browser. This issue was introduced in commit dbd1af5bf and has not been fixed...

CVE-2019-13314

A password disclosure flaw was found in virt-bootstrap, version 1.1.0. Because virt-bootstrap accepts root password as a command line argument via --root-password option, the password could leak to other system users via process listing...

Cross-Site Scripting (XSS)

bootstrap-table is vulnerable to cross-site scripting. The vulnerability exists in onCellHtmlData when the exportOptions is set to true which allows an attacker to inject and execute maliciously crafted script...