Lucene search
+L

897 matches found

Fedora
Fedora
added 2022/02/13 1:7 a.m.23 views

[SECURITY] Fedora 34 Update: php-twig2-2.14.11-1.fc34

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

9.8CVSS3.2AI score0.08209EPSS
SaveExploits3
CNVD
CNVD
added 2022/02/09 12:0 a.m.91 views

Sensio Labs Twig Injection Vulnerability

Sensio Labs Twig is a PHP template engine from the French company Sensio Labs that supports custom tags and filters and the creation of DSLs. Sensio Labs Twig is vulnerable to injection, which can be exploited by attackers to run arbitrary PHP functions...

9.8CVSS3.1AI score0.08209EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.24 views

Sensio Labs Twig 代码代码注入漏洞

Sensio Labs Twig is a PHP template engine from the French company Sensio Labs that supports custom tags and filters and the creation of DSLs. Sensio Labs Twig is vulnerable to injection, which can be exploited by attackers to run arbitrary PHP functions...

9.8CVSS5.8AI score0.08209EPSS
SaveExploits3References13
NVD
NVD
added 2022/01/21 6:15 p.m.13 views

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

8.8CVSS0.00691EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/21 6:15 p.m.16 views

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

8.8CVSS6.2AI score0.00691EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/21 6:15 p.m.9 views

UBUNTU-CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

8.8CVSS6.4AI score0.00691EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/01/21 6:15 p.m.20 views

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

8.8CVSS6.4AI score0.00691EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/21 6:15 p.m.14 views

Input validation

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

6.5CVSS8.5AI score0.00691EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/21 6:0 p.m.49 views

CVE-2022-0323 Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

5.3CVSS8.8AI score0.00691EPSS
SaveExploits1References2
CVE
CVE
added 2022/01/21 6:0 p.m.120 views

CVE-2022-0323

CVE-2022-0323 refers to an issue in the Packagist mustache/mustache template engine: improper neutralization of special elements in templates prior to version 2.14.1. Multiple connected sources reiter this vulnerability affecting the mustache library used in various apps (e.g., Moodle references)...

8.8CVSS6.5AI score0.00691EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/01/21 6:0 p.m.23 views

CVE-2022-0323 Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

5.3CVSS5.7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/21 12:0 a.m.8 views

mustache.php 代码注入漏洞

mustache.php is an implementation of Mustache in PHP. A security vulnerability exists in mustache.php prior to version 2.14.1, which stems from the software's lack of effective filtering and escaping of special elements used in the template engine...

8.8CVSS6.3AI score0.00691EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/10 8:15 p.m.1 views

DEBIAN-CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS7.2AI score0.01927EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 8:15 p.m.27 views

CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS0.01927EPSS
SaveExploits0References11
NVD
NVD
added 2022/01/10 8:15 p.m.26 views

CVE-2021-21408

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch...

8.8CVSS0.0222EPSS
SaveExploits0References9
OSV
OSV
added 2022/01/10 8:15 p.m.4 views

DEBIAN-CVE-2021-21408

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch...

8.8CVSS6.8AI score0.0222EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 8:15 p.m.31 views

CVE-2021-21408

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch...

8.8CVSS6.6AI score
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2022/01/10 8:15 p.m.51 views

CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS6.7AI score0.01927EPSS
SaveExploits0References10
OSV
OSV
added 2022/01/10 8:15 p.m.8 views

UBUNTU-CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS6.8AI score0.01927EPSS
SaveExploits0References11
OSV
OSV
added 2022/01/10 8:15 p.m.12 views

UBUNTU-CVE-2021-21408

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch...

8.8CVSS6.6AI score0.0222EPSS
SaveExploits0References9
Rows per page
Query Builder