Lucene search
+L

271 matches found

RedHat Linux
RedHat Linux
added 2020/11/04 1:39 a.m.13 views

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.6AI score0.04135EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:31 a.m.10 views

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.6AI score0.04135EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/09/29 9:12 p.m.9 views

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.6AI score0.04135EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2019/09/30 12:00 a.m.38 views

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2019-2080)

According to the version of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/',...

5.3CVSS6.2AI score0.18479EPSS
SaveExploits0References2
Trend Micro Simply Security
Trend Micro Simply Security
added 2019/04/18 1:00 p.m.9 views

This Week in Security News: Medical Malware and Monitor Hacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn how baby monitors may be susceptible to hacking. Also, learn about a medical flaw that enables hackers to hide malware. Read on: Is Yo...

7.1AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2019/04/17 1:00 p.m.24 views

What Did We Learn from the Global GPS Collapse?

On April 6, 2019, a ten-bit counter rolled over. The counter, a component of many older satellites, marks the weeks since Jan 1, 1980. It rolled over once before, in the fall of 1999. That event was inconsequential because few complex systems relied on GPS. Now, more systems rely on accurate time...

0.3AI score
SaveExploits0
RubySec
RubySec
added 2018/09/13 12:00 a.m.38 views

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.3AI score0.04312EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2018/07/17 12:00 a.m.20 views

Bootstrap cross-site scripting vulnerability (CNVD-2018-13372)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the collapse data-parent attribute in Bootstrap versions prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

6.1CVSS6.3AI score0.04135EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2018/07/16 10:48 p.m.45 views

CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS2.1AI score0.04135EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/07/13 2:29 p.m.44 views

CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.7AI score0.04135EPSS
SaveExploits1References5
OSV
OSV
added 2018/07/13 2:29 p.m.11 views

AZL-44334 CVE-2018-14040 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.7AI score0.04135EPSS
SaveExploits1References1
NVD
NVD
added 2018/07/13 2:29 p.m.22 views

CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.3AI score0.04135EPSS
SaveExploits1References19
OSV
OSV
added 2018/07/13 2:29 p.m.14 views

AZL-13232 CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.7AI score0.04135EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/13 2:29 p.m.9 views

UBUNTU-CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.7AI score0.04135EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2018/07/13 2:00 p.m.50 views

CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2018/07/13 12:00 a.m.13 views

PT-2018-12295 · Twitter +4 · Bootstrap +4

Name of the Vulnerable Software and Affected Versions: Bootstrap versions 2.3.0 through 3.4.0 Bootstrap versions 4.0.0 through 4.1.1 Description: The issue allows for XSS in the collapse data-parent attribute. Recommendations: For Bootstrap versions 2.3.0 through 3.4.0, update to version 3.4.0 or...

9.8CVSS6.2AI score0.9927EPSS
SaveExploits75References271
GitLab Advisory Database
GitLab Advisory Database
added 2018/07/13 12:00 a.m.66 views

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In Bootstrap, XSS is possible in the collapse data-parent attribute...

6.1CVSS1.8AI score0.04135EPSS
SaveExploits1References1Affected Software1
RedHat Linux
RedHat Linux
added 2017/09/06 8:36 p.m.16 views

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

5.5CVSS7.2AI score0.00465EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 2:22 p.m.10 views

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

5.5CVSS7.2AI score0.00465EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 2:13 p.m.10 views

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

5.5CVSS7.2AI score0.00465EPSS
SaveExploits0References4
Rows per page
Query Builder