Lucene search
+L

678 matches found

Rockylinux
Rockylinux
•added 2025/11/28 9:04 a.m.•22 views

container-tools:rhel8 security and bug fix update

An update is available for libslirp, module.libslirp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The container-tools module contains tools for working with...

9.8CVSS6AI score0.04561EPSS
SaveExploits3
osv_rlsa
osv_rlsa
•added 2025/11/28 9:04 a.m.•45 views

RLSA-2023:6939 Moderate: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handling of JavaScri...

9.8CVSS6AI score0.04561EPSS
SaveExploits3References18
osv_rlsa
osv_rlsa
•added 2025/11/28 9:04 a.m.•21 views

RLSA-2023:6938 Moderate: container-tools:4.0 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handling of JavaScri...

9.8CVSS6.1AI score0.04561EPSS
SaveExploits2References17
EUVD
EUVD
•added 2025/11/24 12:41 p.m.•12 views

EUVD-2025-198694

Malicious code in @asyncapi/html-template npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 12:41 p.m.•16 views

Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2025/11/24 12:41 p.m.•13 views

MAL-2025-190658 Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2011-4540

Malware in sbrugna...

4.3CVSS5.8AI score0.01623EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-0296

Malware in sbrugna...

9.3CVSS7.6AI score0.01656EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/04 7:07 a.m.•36 views

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS5.8AI score0.00249EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-53084

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00312EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2024-19966

Malicious code in bioql PyPI...

6.5CVSS5.9AI score0.00409EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2023-43050

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.0093EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-43051

Malicious code in bioql PyPI...

6.1CVSS6.7AI score0.00911EPSS
SaveExploits0References6
NVD
NVD
•added 2025/10/03 7:15 a.m.•28 views

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS0.00249EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/10/03 6:16 a.m.•19 views

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS5.8AI score0.00249EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/03 6:16 a.m.•29 views

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS0.00249EPSS
SaveExploits1References2
CVE
CVE
•added 2025/10/03 6:16 a.m.•42 views

CVE-2025-61597

CVE-2025-61597 (Emlog) is a stored XSS vulnerability in Emlog 2.5.21 and earlier caused by HTML template injection in the mail template settings. In an authenticated admin session, saving a malicious payload can cause attacker‑controlled JavaScript to execute on subsequent visits to the settings ...

7.6CVSS5.8AI score0.00249EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•9 views

CVE-2025-61597: Improper Neutralization of Input During Web Page Generation

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS5.8AI score0.00249EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
•added 2025/09/04 11:09 a.m.•12 views

Improper sanitization of CSS values in html/template

...

7.3CVSS6.6AI score0.01037EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 8:51 a.m.•15 views

Improper handling of special tags within script contexts in html/template

...

6.1CVSS6.6AI score0.00911EPSS
SaveExploits0
Rows per page
Query Builder