https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:36:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02248 bdu:2020-02248 https://cve.radiocsirt.org/vuln/bdu:2020-02248 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1015 certfr-2024-avi-1015 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1015 https://cve.radiocsirt.org/vuln/cnvd-2018-13373 cnvd-2018-13373 https://cve.radiocsirt.org/vuln/cnvd-2018-13373 https://cve.radiocsirt.org/vuln/euvd-2026-66833 EUVD-2026-66833 https://cve.radiocsirt.org/vuln/euvd-2026-66833 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14041 <p>In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.</p> <p>In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14041 https://cve.radiocsirt.org/vuln/ghsa-pj7m-g53m-7638 <p><strong>Affected:</strong> npm: bootstrap, Packagist: typo3/cms-core, Packagist: typo3/cms, RubyGems: bootstrap, Packagist: twbs/bootstrap, NuGet: bootstrap, NuGet: bootstrap.sass, Maven: org.webjars:bootstrap</p> <p>In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.</p> <p><strong>Affected:</strong> npm: bootstrap, Packagist: typo3/cms-core, Packagist: typo3/cms, RubyGems: bootstrap, Packagist: twbs/bootstrap, NuGet: bootstrap, NuGet: bootstrap.sass, Maven: org.webjars:bootstrap</p> <p>In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.</p> https://cve.radiocsirt.org/vuln/ghsa-pj7m-g53m-7638 https://cve.radiocsirt.org/vuln/gsd-2018-14041 gsd-2018-14041 https://cve.radiocsirt.org/vuln/gsd-2018-14041 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11242-1 <p>jupyter-notebook-6.2.0-1.4 on GA media</p> <p>jupyter-notebook-6.2.0-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11242-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1456 <p>bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy bootstrap: XSS in the tooltip data-viewport attribute bootstrap: XSS in the affix configuration target property picketlink: reflected XSS in SAMLRequest via RelayState parameter picketlink: URL injection via xinclude parameter keycloak: missing signatures validation on CRL used to verify client certificates undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed bootstrap: XSS in the tooltip or popover data-template attribute keycloak: Node.js adapter internal NBF can be manipulated leading to DoS. jquery: Prototype pollution in object&#39;s prototype leading to denial of service, remote code execution, or property injection</p> <p>bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy bootstrap: XSS in the tooltip data-viewport attribute bootstrap: XSS in the affix configuration target property picketlink: reflected XSS in SAMLRequest via RelayState parameter picketlink: URL injection via xinclude parameter keycloak: missing signatures validation on CRL used to verify client certificates undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed bootstrap: XSS in the tooltip or popover data-template attribute keycloak: Node.js adapter internal NBF can be manipulated leading to DoS. jquery: Prototype pollution in object&#39;s prototype leading to denial of service, remote code execution, or property injection</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1456 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1947 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service Zustand hervorzurufen, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen oder beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service Zustand hervorzurufen, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen oder beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1947