Lucene search
+L

12220 matches found

BDU FSTEC
BDU FSTEC
•added 2024/07/15 12:00 a.m.•20 views

The vulnerability of the Multiline RFC 2231 email server component in Exim, which allows bypassing existing security restrictions by implementing specially crafted executable files.

The vulnerability of the Multiline RFC 2231 email server component relates to deficiencies in the restrictions on loading files of hazardous types. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by introducing specially crafted executable files...

6.4CVSS7AI score0.41491EPSS
SaveExploits5References14Affected Software4
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•17 views

IMA Fails to Start with Error Code 2147483649

The IMA Service might sometimes fail with error code 2147483649. Failed to load plugins imapsss.dll, imaruntimess.dll, 80000001h...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/07/12 12:00 a.m.•12 views

The vulnerability of the log loading function of the HarmonyOS AILife Audio Service platform for managing audio devices allows a malicious actor to elevate their privileges and gain access to read, modify, or delete files.

The vulnerability of the log loading function of the HarmonyOS AILife Audio Service platform relates to an incorrect limitation on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain access to read, modify, or delete...

7.3CVSS5.5AI score0.00282EPSS
SaveExploits0References3Affected Software2
Github Security Blog
Github Security Blog
•added 2024/07/11 6:31 p.m.•57 views

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6AI score0.00494EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/07/11 6:31 p.m.•15 views

GHSA-VXMC-5X29-H64V Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS7AI score0.00494EPSS
SaveExploits0References4
Snyk
Snyk
•added 2024/07/11 5:40 p.m.•9 views

Cross-site Scripting

Overview org.fujion.webjars:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting through the data-loading-text attribute in the button component. An attacker can execute arbitrary JavaScript code...

6.4CVSS5.6AI score0.00494EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/07/11 5:40 p.m.•3 views

Cross-site Scripting

Overview org.webjars.bowergithub.jasny:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting through the data-loading-text attribute in the button component. An attacker can execute arbitrary...

6.4CVSS5.6AI score0.00494EPSS
SaveExploits0References2
OSV
OSV
•added 2024/07/11 5:15 p.m.•5 views

AZL-105134 CVE-2024-6485 affecting package ceph 18.2.2-13

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•5 views

AZL-105206 CVE-2024-6485 affecting package ntopng 5.2.1-6

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•16 views

AZL-71317 CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•3 views

AZL-105272 CVE-2024-6485 affecting package pytorch 2.2.2-17

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/11 5:15 p.m.•28 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
OSV
OSV
•added 2024/07/11 5:15 p.m.•6 views

AZL-105158 CVE-2024-6485 affecting package fluent-bit 3.1.10-7

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•7 views

DEBIAN-CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•19 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6AI score
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•5 views

AZL-105104 CVE-2024-6485 affecting package python-openstackdocstheme 3.0.0-9

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/11 5:15 p.m.•13 views

UBUNTU-CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References4
Mend
Mend
•added 2024/07/11 5:08 p.m.•1 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References4
CVE
CVE
•added 2024/07/11 5:08 p.m.•185 views

CVE-2024-6485

CVE-2024-6485 is a Bootstrap XSS vulnerability in the button component’s data-loading-text attribute. Affected: Bootstrap 3.x (notably Bootstrap 3.x series); impact is cross-site scripting when the loading state is triggered. Mitigation: Debian LTS advisory indicates fixed in 3.4.1+dfsg-2+deb11u1...

6.4CVSS6AI score0.00494EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/07/11 5:08 p.m.•32 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0
Rows per page
Query Builder