Lucene search
+L

173 matches found

Cvelist
Cvelist
added 2024/03/01 2:00 p.m.41 views

CVE-2024-2064 rahman SelectCours Template CacheController.java getCacheNames injection

A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCacheNames of the file CacheController.java of the component Template Handler. The manipulation of the argument fragment leads to injection. The attack can be...

4.3CVSS5.5AI score0.00519EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.12 views

SelectCours Security Breach

SelectCours is AbuCoder open source a secondary school based on Ruoyi rapid development framework for course selection system . SelectCours 1.0 version of a security vulnerability , the vulnerability stems from the component Template Handler file CacheController.java function getCacheNames there...

4.3CVSS7.2AI score0.00519EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/16 10:15 p.m.14 views

CVE-2024-0601

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...

6.5CVSS5.4AI score0.00482EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/16 10:15 p.m.23 views

Server side request forgery (ssrf)

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...

6.5CVSS7.1AI score0.00482EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/01/16 9:31 p.m.54 views

CVE-2024-0601

CVE-2024-0601 affects ZhongFuCheng3y Austin 1.0, specifically the getRemoteUrl2File function in AustinFileUtils.java (Email Message Template Handler). Multiple connected sources (NVD, Red Hat, PRION, PT-SEC) corroborate a server-side request forgery (SSRF) condition triggered by insufficient vali...

6.5CVSS6.5AI score0.00482EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.13 views

Austin security breach

Austin is a message push platform. A security vulnerability exists in Austin version 1.0, which stems from a Server Request Forgery SSRF vulnerability in the component Email Message Template Handler...

6.5CVSS6.9AI score0.00482EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:00 a.m.26 views

FreeBSD : py-django-photologue -- XSS vulnerability (c2c89dea-2859-4231-8f3b-012be0d475ff)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c2c89dea-2859-4231-8f3b-012be0d475ff advisory. - A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected b...

6.1CVSS4.3AI score0.00514EPSS
SaveExploits0References3
NVD
NVD
added 2023/08/21 3:15 a.m.26 views

CVE-2023-4450

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...

9.8CVSS7.5AI score0.11595EPSS
SaveExploits1References3
Prion
Prion
added 2023/08/21 3:15 a.m.20 views

Design/Logic Flaw

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...

6.5CVSS9.7AI score0.11595EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/08/21 2:31 a.m.33 views

CVE-2023-4450 jeecgboot JimuReport Template injection

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...

6.5CVSS10AI score0.11595EPSS
SaveExploits1References3
OSV
OSV
added 2023/08/21 2:31 a.m.27 views

CVE-2023-4450 jeecgboot JimuReport Template injection

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...

6.3CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/08/21 12:00 a.m.13 views

PT-2023-29265 · Unknown · Jeecgboot Jimureport

Name of the Vulnerable Software and Affected Versions: jeecgboot JimuReport versions up to 1.6.0 Description: A critical issue was found in the Template Handler component, allowing for remote injection attacks. The exploit has been disclosed publicly. Recommendations: For jeecgboot JimuReport...

9.8CVSS7.6AI score0.11595EPSS
SaveExploits1References8
NVD
NVD
added 2023/06/03 11:15 a.m.43 views

CVE-2023-3085

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10b202303061504. This issue affects the function runaction of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument requestpath leads ...

6.1CVSS4.5AI score0.00489EPSS
SaveExploits0References4
Prion
Prion
added 2023/06/03 11:15 a.m.29 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10b202303061504. This issue affects the function runaction of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument requestpath leads ...

4CVSS6.1AI score0.00489EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.25 views

SUSE CVE-2002-1700

Cross-site scripting vulnerability XSS in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message...

4.3CVSS6.9AI score0.24274EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/27 3:15 p.m.14 views

UBUNTU-CVE-2022-4729

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS3.9AI score0.00739EPSS
SaveExploits1References6
OSV
OSV
added 2022/12/15 9:30 p.m.28 views

GHSA-287Q-JFCP-9VHV django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS4.6AI score0.00514EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.38 views

django-photologue vulnerable to Cross-site Scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00514EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2022/12/15 9:15 p.m.18 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00514EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/12/15 9:15 p.m.23 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00514EPSS
SaveExploits0References4
Rows per page
Query Builder