3098 matches found
XSS vulnerability via data-target in bootstrap
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute...
XSS vulnerability via data-target in bootstrap-sass
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute...
TYPO3 Bootstrap Package Extension Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Bootstrap Package is one of the plugins that configures the front-end theme extension. A cross-site scripting vulnerability exists in versions of TYPO3 Bootstrap Package...
Cross-Site Scripting
Overview All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-3081 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)
org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-3081 Source advisory: MEND:CVE-2016-3081...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)
org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-3082 Source advisory: MEND:CVE-2016-3082...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)
org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: MEND:CVE-2016-0785...
openSUSE Security Update : xen (openSUSE-2016-34)
This update for xen fixes the following security issues : - CVE-2015-8550: paravirtualized drivers incautious about shared memory contents XSA-155, boo957988 - CVE-2015-8558: qemu: usb: infinite loop in ehciadvancestate results in DoS boo959006 - CVE-2015-7549: qemu pci: NULL pointer dereference...
[SECURITY] [DLA 312-1] libtorrent-rasterbar security update
Package : libtorrent-rasterbar Version : 0.14.10-2+deb6u1 CVE ID : CVE-2015-5685 Debian Bug : 797046 The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." Note while this CV...
CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
DEBIAN-CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
UBUNTU-CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
Input validation
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
CVE-2015-5685
CVE-2015-5685 affects the BitTorrent DHT bootstrap server (bootstrap-dht) and the libtorrent-rasterbar codebase. The vulnerability arises in the lazy_bdecode function, where improper indexing can allow a remote attacker to execute arbitrary code via a crafted packet. Several advisories reference ...
CVE-2015-5685: Improper Input Validation
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
BitTorrent Bootstrap Remote Code Execution Vulnerability
BitTorrent is a set of peer-to-peer file uploading and downloading software based on the BitTorrent protocol by BitTorrent Inc. in the U.S. BitTorrent Bootstrap aka bootstrap-dht is one of the DHT Distributed Hash Table bootstrap servers. network node hash list bootstrap into BitTorrent. A remote...
BitTorrent Bootstrap Improper Indexing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent Bootstrap. User interaction is not required to exploit this vulnerability. The specific flaw exists within the handling of arguments passed to the lazybdecode function. By sending a...
BitTorrent Bootstrap Improper Indexing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent Bootstrap. User interaction is not required to exploit this vulnerability. The specific flaw exists within the handling of arguments passed to the lazybdecode function. By sending a...