Lucene search
+L

1512 matches found

EUVD
EUVD
•added 2026/09/11 12:31 a.m.•16 views

EUVD-2026-75877

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

9.1CVSS6AI score0.00376EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/10 10:02 p.m.•14 views

CVE-2026-19646 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

9.1CVSS6.2AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 10:02 p.m.•58 views

CVE-2026-19646 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

9.1CVSS0.00376EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/02 5:27 a.m.•16 views

Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting

Summary IBM License Key Server Administration and Reporting Tool uses bootstrap javascript library internally. Vulnerability Details CVEID:CVE-2025-1647 DESCRIPTION: Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows...

6.4CVSS6.5AI score0.00494EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•30 views

Online Art Gallery Shop Project Unauthorized Access

The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project is related to incorrect elimination of special elements in the output data. Exploitation of this vulnerability could allow an attacker, operating...

6.5CVSS6.8AI score0.00303EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2026/08/31 10:17 a.m.•15 views

Path Traversal

art-template is vulnerable to Path Traversal. The vulnerability is due to the template sub-template resolution logic using path.resolveroot, filename without validating that the resolved path remains within the intended root directory, which allows an attacker to use path traversal sequences to...

7.5CVSS6AI score0.00558EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/08/05 10:03 a.m.•13 views

Directory Traversal

Overview org.webjars.npm:art-template is a simple and superfast templating engine that optimizes template rendering speed by scope pre-declared technique, hence achieving runtime performance which is close to the limits of JavaScript. At the same time, it supports both NodeJS and browser. Affecte...

8.7CVSS6.1AI score0.00558EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/05 10:03 a.m.•20 views

Directory Traversal

Overview art-template is a simple and superfast templating engine that optimizes template rendering speed by scope pre-declared technique, hence achieving runtime performance which is close to the limits of JavaScript. At the same time, it supports both NodeJS and browser. Affected versions of th...

8.7CVSS6.1AI score0.00558EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/08/05 10:03 a.m.•16 views

01-dev (1.0.0), 04-musicplayer (1.0.0) +1334 more potentially affected by CVE-2026-71215 via art-template (>=2.0.2, <=4.13.4)

art-template NPM version =2.0.2, =1.0.0, =0.0.1, =1.0.0, =0.0.1-alpha.1, =1.0.2-alpha.3, =1.0.0-alpha.1, =1.0.3-alpha.3, =1.1.4-alpha.1, =1.0.0-alpha.1, =0.1.0-alpha.1, =0.0.1-alpha.1, =0.0.2-alpha.13 and more Source cves: CVE-2026-71215 Source advisory: SNYK:JS-ARTTEMPLATE-18533449...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0
NVD
NVD
•added 2026/08/05 8:16 a.m.•22 views

CVE-2026-71215

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

7.5CVSS0.00558EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/05 6:59 a.m.•61 views

CVE-2026-71215 art-template - Path Traversal in Sub-Template Resolution via include()/extend()

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

7.5CVSS0.00558EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/05 6:59 a.m.•19 views

CVE-2026-71215 art-template - Path Traversal in Sub-Template Resolution via include()/extend()

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/05 6:59 a.m.•77 views

CVE-2026-71215

CVE-2026-71215 affects art-template. Sub-template resolution (resolve-filename.js) resolves target file paths using path.resolve(root, filename) without validating the resulting path is inside root, allowing traversal via include()/extend() and passing the path to fs.readFileSync. An attacker can...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/05 6:59 a.m.•24 views

CVE-2026-71215

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root. Because path.resolve discards ro...

7.5CVSS6AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•10 views

CVE-2026-71215: Improper Limitation of a Pathname to a Restricted Directory

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•8 views

PT-2026-68053

Name of the Vulnerable Software and Affected Versions art-template affected versions not specified Description Sub-template resolution logic in src/compile/adapter/resolve-filename.js, utilized by the include and extend template directives, fails to verify if the resolved file path remains within...

7.5CVSS5.9AI score0.00558EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2026/08/04 12:00 a.m.•14 views

Paged Out! Magazine Issue 5

Paged Out! magazine issue 5 includes sections related to art, algorithms, artificial intelligence, cryptography, file formats, game development, hardware, history, networks, OS internals, operating systems, programming, retro stuff, reverse engineering, and security / hacking...

5.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/04 12:00 a.m.•35 views

Paged Out! Magazine Issue 3

Paged Out! magazine issue 3 includes sections related to art, artificial intelligence, cryptography, file formats, hardware, networks, programming, reverse engineering, security / hacking, and system administration...

5.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/04 12:00 a.m.•14 views

Paged Out! Magazine Issue 6

Paged Out! magazine issue 6 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, food for thought, game development, hardware, networks, OS internals, programming, retro stuff, reverse engineering, and security / hacking...

5.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/04 12:00 a.m.•20 views

Paged Out! Magazine Issue 4

Paged Out! magazine issue 4 includes sections related to art, artificial intelligence, assembly, cryptography, demo scene, file formats, hardware, history, programming, retro stuff, reverse engineering, and security / hacking...

5.5AI score
SaveExploits0
Rows per page
Query Builder