ceph

7 results · Clear filters · Feed

• High 8.1
  CVE-2026-124040 Public exploit

  CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State

  CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in handle_http2() that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseud…

  CivetWeb CivetWeb ceph civetweb Debian Ubuntu Azure Linux
  Nov 6, 2026
• Medium 6.4
  CVE-2024-6485 Public exploit

  XSS in Bootstrap button component

  A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting mal…

  Bootstrap Bootstrap-sass Bootstrap bootstrap-sass Debian Ubuntu Azure Linux Wolfi npm
  Jul 11, 2024
• Medium 6.5
  CVE-2023-43040 Public exploit

  IBM Spectrum Fusion HCI improper access control

  IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

  IBM Spectrum Fusion HCI ceph ceph Debian Ubuntu Azure Linux
  May 13, 2024
• Medium 6.1
  CVE-2019-8331 Public exploit EPSS 16%

  Bootstrap Vulnerable to Cross-Site Scripting

  In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

  ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  Feb 20, 2019
• Medium 6.1
  CVE-2018-14042 Public exploit

  Bootstrap Cross-site Scripting vulnerability

  In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

  ceph fluent-bit pytorch bootstrap Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  Jul 13, 2018
• Medium 6.1
  CVE-2015-9251 Public exploit EPSS 30%

  Cross-Site Scripting (XSS) in jquery

  jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

  ruby ceph jquery-rails jQuery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  Jan 18, 2018
• Medium 6.1
  CVE-2012-6708 Public exploit

  Cross-Site Scripting in jquery

  jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

  ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  Jan 18, 2018