Lucene search
+L

168 matches found

OSV
OSV
added 2021/08/10 4:08 p.m.25 views

GHSA-RQF8-8C89-MW29 Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

5.4CVSS6.2AI score0.00793EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/08/10 4:08 p.m.59 views

Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

6.1CVSS2.6AI score0.00793EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2021/07/30 12:00 a.m.63 views

curly-bracket-parser cross-site scripting vulnerability

curly-bracket-parser is an application. A bracket parser. curly-bracket-parser suffers from a cross-site scripting vulnerability that stems from a failure to properly clean up user input when used as a template library, which can be exploited by attackers to conduct cross-site scripting attacks...

6.1CVSS3.3AI score0.00793EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/28 4:15 p.m.33 views

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

6.1CVSS0.00793EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/28 4:05 p.m.38 views

CVE-2021-23416 Cross-site Scripting (XSS)

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

5.4CVSS6.4AI score0.00793EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/07/28 4:03 p.m.4 views

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

6.1CVSS5.3AI score0.00793EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/07/28 12:00 a.m.9 views

curly-bracket-parser 跨站脚本漏洞

curly-bracket-parser is an application. A bracket parser. curly-bracket-parser suffers from a cross-site scripting vulnerability that stems from a failure to properly clean up user input when used as a template library, which can be exploited by attackers to conduct cross-site scripting attacks...

6.1CVSS5.2AI score0.00793EPSS
SaveExploits1References2
Snyk
Snyk
added 2021/05/27 11:26 a.m.1 views

Cross-site Scripting (XSS)

Overview curly-bracket-parser is a Simple parser to replace variables inside templates/strings and files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. When used as a template library, it does not properly sanitize the user input. PoC const express = require'expres...

6.1CVSS5.4AI score0.00793EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/01/21 12:00 a.m.14 views

The vulnerability of the Active Template Library in the Windows operating system allows attackers to exploit their privileges.

The vulnerability of the Active Template Library in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.00776EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/01/13 12:00 a.m.36 views

Microsoft Windows Multiple Vulnerabilities (KB4598285)

This host is missing a critical security update according to Microsoft KB4598285 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.0938EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/01/13 12:00 a.m.44 views

Microsoft Windows Multiple Vulnerabilities (KB4598279)

This host is missing a critical security update according to Microsoft KB4598279 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.0938EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/01/13 12:00 a.m.32 views

Microsoft Windows Multiple Vulnerabilities (KB4598278)

This host is missing a critical security update according to Microsoft KB4598278 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.0938EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/01/13 12:00 a.m.29 views

Microsoft Windows Multiple Vulnerabilities (KB4598231)

This host is missing a critical security update according to Microsoft KB4598231 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.0938EPSS
SaveExploits1References1
NVD
NVD
added 2021/01/12 8:15 p.m.18 views

CVE-2021-1650

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...

7.8CVSS8.1AI score0.00799EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/12 8:15 p.m.8 views

CVE-2021-1649

Active Template Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00776EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/12 8:15 p.m.19 views

CVE-2021-1649

Active Template Library Elevation of Privilege Vulnerability...

7.8CVSS8.1AI score0.00776EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/12 8:15 p.m.7 views

CVE-2021-1650

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00799EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/12 8:15 p.m.27 views

Privilege escalation

Active Template Library Elevation of Privilege Vulnerability...

7.2CVSS8AI score0.00776EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2021/01/12 7:42 p.m.125 views

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

7.8CVSS8.1AI score0.00799EPSS
SaveExploits0References2Affected Software6
CVE
CVE
added 2021/01/12 7:42 p.m.139 views

CVE-2021-1649

Technical details for CVE-2021-1649 are not publicly provided in the supplied documents. Monitor for updates from the connected sources for affected products, impact, and fixes.

7.8CVSS8.1AI score0.00776EPSS
SaveExploits0References2Affected Software8
Rows per page
Query Builder