Lucene search
+L

38 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/11 8:38 a.m.•23 views

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...

9.1CVSS7.1AI score0.00516EPSS
SaveExploits0Affected Software1
osv_oesa
osv_oesa
•added 2026/05/15 11:11 a.m.•27 views

OESA-2026-2330 compat-openssl11 security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes c...

7.5CVSS6.9AI score0.00944EPSS
SaveExploits2References7
EUVD
EUVD
•added 2026/04/08 12:30 a.m.•25 views

EUVD-2026-19958

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service fo...

7.1AI score0.00516EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/07 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-28386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 byt...

9.1CVSS7AI score0.00516EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/28 10:11 a.m.•19 views

CVE-2026-33938

A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the @partial-block special variable within the template data context. By overwriting @partial-block with a specially crafted Abstract Syntax Tree AST through a helper, a subsequent invocation of...

8.1CVSS6.8AI score0.00721EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/03/28 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-33938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in...

8.1CVSS6.6AI score0.00721EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/27 9:17 p.m.•24 views

CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS0.00721EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2026/03/27 9:17 p.m.•17 views

DEBIAN-CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/03/27 9:17 p.m.•27 views

UBUNTU-CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2026/03/27 9:17 p.m.•17 views

CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/03/27 9:05 p.m.•21 views

CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2026/03/27 9:05 p.m.•49 views

CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS0.00721EPSS
SaveExploits1References3
Mend
Mend
•added 2026/03/27 9:05 p.m.•6 views

CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the "@partial-block" special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

9.2CVSS6.5AI score0.00721EPSS
SaveExploits1References11
CVE
CVE
•added 2026/03/27 9:05 p.m.•208 views

CVE-2026-33938

The vulnerability CVE-2026-33938 affects the Handlebars library. In versions 4.0.0 through 4.7.8, the special variable @partial-block is stored in the template data context and can be reached and mutated via helpers that accept arbitrary objects. An attacker could overwrite @partial-block with a ...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References8Affected Software1
attackerkb
attackerkb
•added 2026/03/27 9:05 p.m.•19 views

CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.6AI score0.00721EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/27 9:05 p.m.•31 views

CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/03/27 9:05 p.m.•21 views

CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper...

8.1CVSS6.5AI score0.00721EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2026/03/27 6:20 p.m.•72 views

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Summary The @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper overwrites @partial-block with a crafted Handlebars AST, a subsequent invocation of @partial-block compil...

8.1CVSS6.7AI score0.00721EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/03/27 6:20 p.m.•30 views

GHSA-3MFM-83XF-C92R Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Summary The @partial-block special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper overwrites @partial-block with a crafted Handlebars AST, a subsequent invocation of @partial-block compil...

8.1CVSS6.7AI score0.00721EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/27 6:20 p.m.•20 views

EUVD-2026-16849

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block...

8.1CVSS6.4AI score0.00721EPSS
SaveExploits1References3
Rows per page
Query Builder