dbcve.org
Vulnerability index

Browse CVEs

7 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Bootstrap Sass CRITICAL 9.8
CVE-2019-10842

Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker…

No fix yet
Fix from $2,300 2019-04-04
Bootstrap MEDIUM 6.1
CVE-2019-8331EPSS 16%

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Fix: 3.4.1 / 4.3.1+
Fix from $1,600 2019-02-20
Bootstrap MEDIUM 6.1
CVE-2018-20676

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

Fix: 3.4.0+
Fix from $1,600 2019-01-09
Bootstrap MEDIUM 6.1
CVE-2018-20677

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Fix: 3.4.0+
Fix from $1,600 2019-01-09
Bootstrap MEDIUM 6.1
CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018…

Fix: 3.4.0+
Fix from $1,600 2019-01-09
Bootstrap MEDIUM 6.1
CVE-2018-14041

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

Fix: 4.1.2+
Fix from $1,600 2018-07-13
Bootstrap MEDIUM 6.1
CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

Fix: 3.4.0 / 4.1.2+
Fix from $1,600 2018-07-13