2429 matches found
bootstrap Cross-site Scripting vulnerability
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
Cross-Site Scripting
Overview Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...
Authorization Bypass
katello is vulnerable to authorization bypass attacks. The vulnerability exists as modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions 666 for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by...
Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23272)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability in the data-target attribute in Bootstrap version 3.x before 3.4.0 and version 4.x-beta before 4.0.0-beta.2 can be exploited by remote attackers to inject arbitrary...
Cross-Site Scripting (XSS)
Bootstrap is vulnerable to cross-site scripting XSS. An attacker is able to inject arbitrary Javascript into a victim's browser via the tooltip data-viewport attribute, to steal session tokens or perform unwanted actions on behalf of the user...
Cross-site Scripting (XSS)
bootstrap is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of the target property in affix.js, allowing XSS attacks...
DEBIAN-CVE-2018-20676
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
DEBIAN-CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
AZL-44799 CVE-2018-20677 affecting package python-openstackdocstheme 3.0.0-9
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
CVE-2018-20676
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
CVE-2018-20676
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
CVE-2016-10735
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...
Design/Logic Flaw
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...
UBUNTU-CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...
CVE-2018-20676
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...