Lucene search
K

141 matches found

RedhatCVE
RedhatCVE
added 2025/10/29 12:11 a.m.6 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.9AI score0.00039EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/28 6:30 p.m.3 views

EUVD-2025-36547

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

6.4AI score0.00039EPSS
Exploits1References2
OSV
OSV
added 2025/10/28 6:15 p.m.1 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/10/28 6:15 p.m.4 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS0.00039EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/28 12:0 a.m.4 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

0.00039EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/10/28 12:0 a.m.3 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

5.9AI score0.00039EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2025/10/28 12:0 a.m.2 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.9AI score0.00039EPSS
Exploits1References2
CVE
CVE
added 2025/10/28 12:0 a.m.3 views

CVE-2025-60355

CVE-2025-60355 affects the web application OneBlog prior to version 2.3.9. The vulnerability is a Server-Side Template Injection (SSTI) via FreeMarker templates, caused by unsafe processing of templates on the server. The CVE entries indicate a high-impact profile (CVSS 3.1: 9.8, CRITICAL) with n...

9.8CVSS5.9AI score0.00039EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.3 views

OneBlog 安全漏洞

OneBlog is a beautiful and powerful Java blog by yadong.zhang individual developer. A security vulnerability exists in OneBlog versions prior to 2.3.9, which stems from a server-side template injection in FreeMarker templates...

9.8CVSS7AI score0.00039EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.3 views

PT-2025-44194

Name of the Vulnerable Software and Affected Versions zhangyd-c OneBlog versions prior to 2.3.9 Description The software is susceptible to Server-Side Template Injection SSTI through FreeMarker templates. SSTI allows an attacker to inject malicious code into the server, potentially leading to...

9.8CVSS7.1AI score0.00039EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8270

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00128EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-37045

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00115EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-37044

Malicious code in bioql PyPI...

4.3CVSS5AI score0.00131EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8271

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00338EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-52716

Malicious code in bioql PyPI...

8CVSS7.8AI score0.00825EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-32731

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00191EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-29651

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00117EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-37046

Malicious code in bioql PyPI...

4.3CVSS5AI score0.00131EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-32787

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00115EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-26478

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00092EPSS
Exploits1References1
Rows per page
Query Builder