https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:07:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0279 certfr-2025-avi-0279 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0279 https://cve.radiocsirt.org/vuln/euvd-2026-257771 EUVD-2026-257771 https://cve.radiocsirt.org/vuln/euvd-2026-257771 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6485 <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6485 https://cve.radiocsirt.org/vuln/ghsa-vxmc-5x29-h64v <p><strong>Affected:</strong> npm: bootstrap</p> <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> <p><strong>Affected:</strong> npm: bootstrap</p> <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> https://cve.radiocsirt.org/vuln/ghsa-vxmc-5x29-h64v https://cve.radiocsirt.org/vuln/msrc_cve-2024-6485 msrc_CVE-2024-6485 https://cve.radiocsirt.org/vuln/msrc_cve-2024-6485 https://cve.radiocsirt.org/vuln/rhsa-2025:1249 <p>jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods PostCSS: Improper input validation in PostCSS bootstrap: Cross-Site Scripting via button plugin on bootstrap ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching cross-spawn: regular expression denial of service redis: Denial-of-service due to unbounded pattern matching in Redis redis: Lua library commands may lead to stack overflow and RCE in Redis axios: axios: Server-Side Request Forgery python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget python-django: Potential SQL injection in QuerySet.values() and values_list() webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule express: Improper Input Handling in Express Redirects send: Code Execution Vulnerability in Send Library serve-static: Improper Sanitization in serve-static path-to-regexp: Backtracking regular expressions cause ReDoS body-parser: Denial of Service Vulnerability in body-parser redis: Redis&#39; Lua library commands may lead to remote code execution path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x django: Potential denial-of-service in django.utils.html.strip_tags() nanoid: nanoid mishandles non-integer val…</p> <p>jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods PostCSS: Improper input validation in PostCSS bootstrap: Cross-Site Scripting via button plugin on bootstrap ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching cross-spawn: regular expression denial of service redis: Denial-of-service due to unbounded pattern matching in Redis redis: Lua library commands may lead to stack overflow and RCE in Redis axios: axios: Server-Side Request Forgery python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget python-django: Potential SQL injection in QuerySet.values() and values_list() webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule express: Improper Input Handling in Express Redirects send: Code Execution Vulnerability in Send Library serve-static: Improper Sanitization in serve-static path-to-regexp: Backtracking regular expressions cause ReDoS body-parser: Denial of Service Vulnerability in body-parser redis: Redis&#39; Lua library commands may lead to remote code execution path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x django: Potential denial-of-service in django.utils.html.strip_tags() nanoid: nanoid mishandles non-integer val…</p> https://cve.radiocsirt.org/vuln/rhsa-2025:1249 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6485 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: twitter-bootstrap3, Ubuntu:Pro:18.04:LTS: twitter-bootstrap3, Ubuntu:22.04:LTS: twitter-bootstrap3, Ubuntu:24.04:LTS: twitter-bootstrap3</p> <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: twitter-bootstrap3, Ubuntu:Pro:18.04:LTS: twitter-bootstrap3, Ubuntu:22.04:LTS: twitter-bootstrap3, Ubuntu:24.04:LTS: twitter-bootstrap3</p> <p>A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button&#39;s loading state is triggered.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6485 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1606 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bootstrap ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bootstrap ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1606