Lucene search
+L

510 matches found

Cvelist
Cvelist
•added 2025/01/28 3:24 p.m.•35 views

CVE-2025-23211 Tandoor Recipes - SSTI - Remote Code Execution

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24...

9.9CVSS0.03593EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/01/28 3:24 p.m.•11 views

CVE-2025-23211 Tandoor Recipes - SSTI - Remote Code Execution

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24...

9.9CVSS9.6AI score0.03593EPSS
SaveExploits1References3
OSV
OSV
•added 2025/01/28 3:24 p.m.•19 views

CVE-2025-23211 Tandoor Recipes - SSTI - Remote Code Execution

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24...

9.9CVSS7.2AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•21 views

PT-2025-4850

Name of the Vulnerable Software and Affected Versions: Tandoor Recipes versions prior to 1.5.24 Description: The issue is related to a Jinja2 SSTI vulnerability that allows any user to execute commands on the server, potentially with root privileges in the case of the provided Docker Compose file...

9.9CVSS5.8AI score0.03593EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•12 views

PT-2025-4851 · Unknown · Tandoor Recipes

Name of the Vulnerable Software and Affected Versions: Tandoor Recipes versions prior to 1.5.28 Description: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to enumerate the name and content of files...

7.7CVSS7.2AI score0.00521EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•17 views

Tandoor Recipes 安全漏洞

Tandoor Recipes is a Tandoor Recipes open source application for managing recipes, planning meals, creating shopping lists, and more. A security vulnerability exists in Tandoor Recipes versions prior to 1.5.24 that originates from allowing any user to execute commands on the server...

9.9CVSS6.9AI score0.03593EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•12 views

Tandoor Recipes 安全漏洞

Tandoor Recipes is a Tandoor Recipes open source application for managing recipes, planning meals, creating shopping lists, and more. A security vulnerability exists in Tandoor Recipes versions prior to 1.5.28, which stems from an external storage feature that allows any user to enumerate the nam...

7.7CVSS6.5AI score0.00521EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•15 views

Tandoor Recipes 代码问题漏洞

Tandoor Recipes is a Tandoor Recipes open source application for managing recipes, planning meals, creating shopping lists and more. A code issue vulnerability exists in Tandoor Recipes versions prior to 1.5.28, which stems from a file upload feature that allows the upload of arbitrary files,...

8.7CVSS7AI score0.00367EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2025/01/06 9:15 p.m.•15 views

CVE-2024-55075

Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes...

5.3CVSS6.9AI score0.00516EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/06 12:00 a.m.•10 views

CVE-2024-55075

Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes...

4.3CVSS6.7AI score
SaveExploits0References3
NVD
NVD
•added 2024/12/02 2:15 p.m.•27 views

CVE-2024-53725

Cross-Site Request Forgery CSRF vulnerability in aMiT Post Hits Counter hits-counter allows Reflected XSS.This issue affects Post Hits Counter: from n/a through = 2.8.23...

7.1CVSS0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•69 views

CVE-2024-53725

CVE-2024-53725 is a CSRF to Reflected XSS vulnerability in the WordPress plugin WordPress Post Hits Counter (

7.1CVSS7.2AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/29 6:15 p.m.•15 views

CVE-2024-43935

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/29 6:08 p.m.•40 views

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

6.5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/29 6:08 p.m.•23 views

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

6.5CVSS6.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/13 10:15 a.m.•32 views

CVE-2024-38688

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
Cvelist
Cvelist
•added 2024/08/13 9:48 a.m.•27 views

CVE-2024-38688

...

SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/13 9:48 a.m.•15 views

CVE-2024-38688

...

9.5AI score
SaveExploits0
CVE
CVE
•added 2024/08/13 9:48 a.m.•56 views

CVE-2024-38688

CVE-2024-38688 is rejected/withdrawn; this CVE ID does not represent an active vulnerability.

5.3AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 1:34 p.m.•12 views

MAL-2024-5027 Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder