Lucene search
K

143 matches found

RedhatCVE
RedhatCVE
added 2025/10/29 12:11 a.m.36 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.9AI score0.00436EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/28 6:30 p.m.4 views

EUVD-2025-36547

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

6.4AI score0.00436EPSS
Exploits1References2
OSV
OSV
added 2025/10/28 6:15 p.m.2 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.8AI score0.00436EPSS
Exploits1References1
NVD
NVD
added 2025/10/28 6:15 p.m.5 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS0.00436EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/28 12:0 a.m.7 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

0.00436EPSS
Exploits1References1
CVE
CVE
added 2025/10/28 12:0 a.m.6 views

CVE-2025-60355

CVE-2025-60355 affects the web application OneBlog prior to version 2.3.9. The vulnerability is a Server-Side Template Injection (SSTI) via FreeMarker templates, caused by unsafe processing of templates on the server. The CVE entries indicate a high-impact profile (CVSS 3.1: 9.8, CRITICAL) with n...

9.8CVSS5.9AI score0.00436EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/28 12:0 a.m.3 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

5.9AI score0.00436EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.4 views

PT-2025-44194

Name of the Vulnerable Software and Affected Versions zhangyd-c OneBlog versions prior to 2.3.9 Description The software is susceptible to Server-Side Template Injection SSTI through FreeMarker templates. SSTI allows an attacker to inject malicious code into the server, potentially leading to...

9.8CVSS7.1AI score0.00436EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.4 views

OneBlog 安全漏洞

OneBlog is a beautiful and powerful Java blog by yadong.zhang individual developer. A security vulnerability exists in OneBlog versions prior to 2.3.9, which stems from a server-side template injection in FreeMarker templates...

9.8CVSS7AI score0.00436EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2025/10/28 12:0 a.m.2 views

CVE-2025-60355

zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI Server-Side Template Injection via FreeMarker templates...

9.8CVSS5.9AI score0.00436EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-26478

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00379EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-8271

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00626EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-8270

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00301EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2021-32731

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00495EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-29651

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00376EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-32787

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00671EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-52716

Malicious code in bioql PyPI...

8CVSS7.8AI score0.00414EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-37046

Malicious code in bioql PyPI...

4.3CVSS5AI score0.00527EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-37045

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00536EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-37044

Malicious code in bioql PyPI...

4.3CVSS5AI score0.00527EPSS
Exploits1References1
Rows per page
Query Builder