Lucene search
K

5 matches found

Positive Technologies
Positive Technologies
added 2024/04/26 12:0 a.m.3 views

PT-2024-24549 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer relate versions prior to 2024.1 Description: The issue is related to a Server-Side Template Injection SSTI vulnerability, which allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS8.5AI score0.00941EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/25 12:0 a.m.3 views

relate 安全漏洞

Relate is a web-based learning and teaching environment. A security vulnerability exists in versions prior to relate 2024.1, which stems from a Template Injection SSTI vulnerability in the Batch Issue Exam Tickets feature...

7.5CVSS7AI score0.04659EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/04/21 12:0 a.m.1 views

Relate 安全漏洞

Relate is a web-based learning and teaching environment. A security vulnerability exists in Relate versions prior to 2024.1 that stems from the presence of a stored cross-site scripting XSS vulnerability...

8.8CVSS5.7AI score0.01672EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/02/01 12:0 a.m.3 views

Helix Sync Command Injection Vulnerability

perforce Helix Sync is a simplification tool from perforce. A security vulnerability exists in Helix Sync versions prior to 2024.1 that stems from the presence of local command injection...

7.8CVSS6.7AI score0.00106EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.3 views

Open Design Alliance Drawings SDK 资源管理错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for .NET, JAVA, and Python...

7.8CVSS7.1AI score0.00102EPSS
Exploits0References3
Rows per page
Query Builder