CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2018/12/21 5:46 p.m.•27 views

GHSA-HJM9-576Q-399P Remote Code Execution in esigate-core

esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution. This attack appear to be exploitable vi...

9.8CVSS5.9AI score0.0316EPSS

SaveExploits0References4

Github Security Blog•added 2018/12/21 5:46 p.m.•56 views

Remote Code Execution in esigate-core

9.8CVSS5.5AI score0.0316EPSS

SaveExploits0References3Affected Software1

NVD•added 2018/12/20 5:29 p.m.•27 views

CVE-2018-1000854

9.8CVSS9.7AI score0.0316EPSS

SaveExploits0References1

CVE•added 2018/12/20 4:00 p.m.•83 views

CVE-2018-1000854

CVE-2018-1000854 concerns esigate.org esigate, affected up to version 5.2. The vulnerability arises from CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in the ESI directive that uses user-specified XSLT, enabling remote code execution. T...

9.8CVSS9.7AI score0.0316EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/12/20 12:00 a.m.•8 views

CVE-2018-1000854: Improper Neutralization of Special Elements in Output Used by a Downstream Component

9.8CVSS5.8AI score0.0316EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by