1878 matches found
CVE-2018-17254
The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...
Bootstrap vulnerable to Cross-Site Scripting (XSS)
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
Bootstrap cross-site scripting vulnerability (CNVD-2018-13372)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the collapse data-parent attribute in Bootstrap versions prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
AZL-43750 CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
AZL-44334 CVE-2018-14040 affecting package python-openstackdocstheme 3.0.0-9
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
UBUNTU-CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
AZL-13232 CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
PT-2018-12295 · Twitter +4 · Bootstrap +4
Name of the Vulnerable Software and Affected Versions: Bootstrap versions 2.3.0 through 3.4.0 Bootstrap versions 4.0.0 through 4.1.1 Description: The issue allows for XSS in the collapse data-parent attribute. Recommendations: For Bootstrap versions 2.3.0 through 3.4.0, update to version 3.4.0 or...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the collapse data-parent attribute...
Serverwg Directory Traversal Vulnerability
serverwg is an http server. A directory traversal vulnerability exists in serverwg. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...
DEBIAN-CVE-2018-5129
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird 52.7, Firefox ESR 52.7, and Firefox 59...
CVE-2017-16198
ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible...
DEBIAN-CVE-2018-11319
Syntastic aka vim-syntastic through 3.9.0 does not properly handle searches for configuration files it searches the current directory up to potentially the root. This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a...
Fedora 26 : knot-resolver (2018-0c0671072b)
Knot Resolver 2.3.0 2018-04-23 ================================ Security -------- - fix CVE-2018-1110: denial of service triggered by malformed DNS messages !550, !558, security!2, security!4 - increase resilience against slow lorris attack security!5 Bugfixes -------- - validation: fix SERVFAIL ...
Directory Traversal
superstatic is vulnerable to directory traversal. The attack exists because it does not check the decoded path has..\ which allow traversal to parent directories in Windows...
Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird 52.7, Firefox ESR 52.7, and Firefox 59...
Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird 52.7, Firefox ESR 52.7, and Firefox 59...
