5387 matches found
CVE-2025-47486
CVE-2025-47486 identifies a Missing Authorization vulnerability in the WordPress plugin WordPress Gutenberg & Elementor Templates Importer For Responsive (Responsive Plus) affecting versions up to 3.1.9. The issue permits accessing functionality not properly constrained by ACLs, exposing a broken...
WordPress plugin Gutenberg和Elementor Templates Importer For Responsive 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-20113 · Cyberchimps · Cyberchimps Gutenberg & Elementor Templates Importer For Responsive
Name of the Vulnerable Software and Affected Versions: CyberChimps Gutenberg & Elementor Templates Importer For Responsive versions 3.1.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs...
WordPress plugin Royal Elementor Addons and Templates 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
jinja2: Jinja has a sandbox breakout through indirect reference to format method
A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...
Authoring Custom Spin Templates
Learn how to create, distribute, and install custom templates for Spin CLI to boost developer productivity and meet regulatory compliance...
nuclei-templates
Nuclei Templates Community curated list of templates for the nu...
BIT-ELASTICSEARCH-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
CVE-2024-52979
A flaw was found in Elasticsearch. This flaw allows a remote attacker to trigger an application-level denial of service by sending specially crafted search templates that use Mustache functions. Mitigation Mitigation for this issue is either not available or the currently available options do not...
Elasticsearch Uncontrolled Resource Consumption Vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
GHSA-MM3M-5497-XGGG Elasticsearch Uncontrolled Resource Consumption Vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
UBUNTU-CVE-2024-52979
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via specifically crafted search templates with Mustache functions. An attacker can cause the Elasticsearch node to crash by sending malicious search templates. Details Denial of Service DoS describes a family of...
Denial of Service (DoS)
Overview org.elasticsearch:elasticsearch is a Distributed, RESTful Search Engine. Affected versions of this package are vulnerable to Denial of Service DoS via specifically crafted search templates with Mustache functions. An attacker can cause the Elasticsearch node to crash by sending malicious...
CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
CVE-2024-52979
CVE-2024-52979 : Uncontrolled Resource Consumption in Elasticsearch occurs when evaluating crafted Mustache-based search templates, potentially causing a Denial of Service by crashing the Elasticsearch node. The provided documents identify the affected software (Elasticsearch) and the underlying ...
CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...
Elasticsearch 7.17.25 and 8.16.0 Security Update (ESA-2024-40)
Elasticsearch Uncontrolled Resource Consumption vulnerabilityESA-2024-40 Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash. Affected Versions:...
CVE-2025-46554
creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14130 2025-04-30 22:06:03+00:00| seen| https://t.me/cvedetector/24135 2025-08-28 13:39:35+00:00| confirmed|...