Lucene search
K

62 matches found

RedHat Linux
RedHat Linux
added 2020/11/04 1:39 a.m.3 views

bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.6AI score0.03991EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:31 a.m.3 views

bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.6AI score0.03991EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/09/29 9:12 p.m.1 views

bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.6AI score0.03991EPSS
Exploits1References4
OSV
OSV
added 2018/09/13 3:50 p.m.1 views

GHSA-7MVR-5X2G-WFC8 Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.9AI score0.03991EPSS
Exploits1References25
Github Security Blog
Github Security Blog
added 2018/09/13 3:50 p.m.407 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.4AI score0.03991EPSS
Exploits1References24Affected Software5
RubySec
RubySec
added 2018/09/13 12:0 a.m.32 views

Bootstrap Cross-site Scripting vulnerability

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041...

6.1CVSS6.1AI score0.04293EPSS
Exploits2References1Affected Software1
CNVD
CNVD
added 2018/07/17 12:0 a.m.4 views

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2018-13371)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the data-container attribute of tooltip in versions of Bootstrap prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web...

6.1CVSS6.3AI score0.03991EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2018/07/16 11:20 p.m.50 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS1.6AI score0.03991EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2018/07/13 2:29 p.m.43 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.7AI score0.03991EPSS
Exploits1References5
OSV
OSV
added 2018/07/13 2:29 p.m.1 views

DEBIAN-CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS9.1AI score0.03991EPSS
Exploits1References1
Prion
Prion
added 2018/07/13 2:29 p.m.36 views

Design/Logic Flaw

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

4.3CVSS6.3AI score0.03991EPSS
Exploits1References17Affected Software1
NVD
NVD
added 2018/07/13 2:29 p.m.26 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.3AI score0.03991EPSS
Exploits1References17
OSV
OSV
added 2018/07/13 2:29 p.m.32 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS9.1AI score
Exploits0References17
OSV
OSV
added 2018/07/13 2:29 p.m.0 views

UBUNTU-CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.7AI score0.03991EPSS
Exploits1References6
OSV
OSV
added 2018/07/13 2:29 p.m.3 views

AZL-44094 CVE-2018-14042 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.7AI score0.03991EPSS
Exploits1References1
CVE
CVE
added 2018/07/13 2:0 p.m.699 views

CVE-2018-14042

CVE-2018-14042 refers to Bootstrap prior to 4.1.2 where the data-container property used by tooltips can trigger cross-site scripting (XSS). The vulnerability arises in the tooltip component’s handling of the data-container attribute, enabling injection of arbitrary HTML/JS when the affected Boot...

6.1CVSS6.1AI score0.03991EPSS
Exploits1References17Affected Software1
Debian CVE
Debian CVE
added 2018/07/13 2:0 p.m.35 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS6.8AI score0.03991EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2018/07/13 12:0 a.m.7 views

PT-2018-12296 · Twitter +4 · Bootstrap +4

Name of the Vulnerable Software and Affected Versions: Bootstrap versions 2.3.0 through 4.1.1 Description: The issue allows for XSS in the data-container property of tooltip. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

9.8CVSS6.1AI score0.9927EPSS
Exploits65References263
Veracode
Veracode
added 2018/05/31 4:13 a.m.46 views

Cross-site Scripting (XSS)

bootstrap is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the data-container variable in tooltip.js, allowing a malicious user to inject and execute arbitrary Javascript...

6.1CVSS5.8AI score0.03991EPSS
Exploits1References24Affected Software6
Fedora
Fedora
added 2010/06/10 7:20 p.m.22 views

[SECURITY] Fedora 13 Update: liboggz-1.1.1-1.fc13

Oggz provides a simple programming interface for reading and writing Ogg files and streams. Ogg is an interleaving data container developed by Monty at Xiph.Org, originally to support the Ogg Vorbis audio format...

10CVSS9.1AI score0.04571EPSS
Exploits1
Rows per page
Query Builder