Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
added 6 days ago6 views

CVE-2026-0685

A flaw was found in the Genshi Template Engine. This server-side template injection SSTI vulnerability in the expression evaluation component allows a remote attacker to achieve remote code execution RCE. By sending crafted template expressions, an attacker can execute arbitrary code on the...

9.8CVSS7AI score0.00726EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-0685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code...

9.8CVSS6.9AI score0.00726EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/26 5:16 p.m.12 views

Arbitrary Code Injection

Overview Genshi is an A toolkit for generation of output for the web Affected versions of this package are vulnerable to Arbitrary Code Injection via the expression evaluation process. An attacker can execute arbitrary code on the server by submitting specially crafted template expressions...

9.8CVSS6.5AI score0.00726EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/26 4:16 p.m.12 views

CVE-2026-0685

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS0.00726EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/26 4:16 p.m.6 views

CVE-2026-0685

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS6.5AI score0.00726EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/26 4:16 p.m.7 views

UBUNTU-CVE-2026-0685

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS6.6AI score0.00726EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/26 3:45 p.m.44 views

CVE-2026-0685 Server side template inject (SSTI) in Edgewall Genshi Template Engine

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

0.00726EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/26 3:45 p.m.54 views

CVE-2026-0685

CVE-2026-0685 affects the Genshi Template Engine (version 0.7.9). The SSTI vulnerability arises in the expression evaluation component due to unsafe use of Python’s eval() and exec() with fallback to Python built-ins, enabling arbitrary code execution if an attacker can influence template express...

9.8CVSS6.7AI score0.00726EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/26 3:45 p.m.58 views

CVE-2026-0685 Server side template inject (SSTI) in Edgewall Genshi Template Engine

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

6.7AI score0.00726EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/26 3:45 p.m.9 views

EUVD-2026-39792

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS6.7AI score0.00726EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/26 3:45 p.m.10 views

CVE-2026-0685

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS6.7AI score0.00726EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/26 3:45 p.m.13 views

CVE-2026-0685 Server side template inject (SSTI) in Edgewall Genshi Template Engine

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

9.8CVSS6.8AI score0.00726EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/26 12:0 a.m.22 views

PT-2026-52839

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...

6.7AI score0.00726EPSS
SaveExploits0References3
CERT
CERT
added 2026/01/20 12:0 a.m.11 views

Server-Side Template Injection (SSTI) vulnerability exist in Genshi

Overview A Server-Side Template Injection SSTI vulnerability exists in the Genshi template engine due to unsafe evaluation of template expressions. Genshi processes template expressions using Python’s 'eval’ and ‘exec’ functions while allowing fallback access to Python built-in objects. If an...

9.8CVSS6.7AI score0.00726EPSS
SaveExploits0References1
OSV
OSV
added 2013/03/08 10:55 p.m.8 views

AZL-44421 CVE-2011-4969 affecting package python-genshi 0.7.9-1

Cross-site scripting XSS vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag...

4.3CVSS7.1AI score0.19191EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2010/07/12 12:0 a.m.13 views

Fedora Update for python-mako FEDORA-2010-10544

Check for the Version of python-mako OpenVAS Vulnerability Test Fedora Update for python-mako FEDORA-2010-10544 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

7.4AI score
SaveExploits0References2
Fedora
Fedora
added 2010/07/07 5:48 p.m.15 views

[SECURITY] Fedora 12 Update: python-mako-0.3.4-1.fc12

Mako is a template library written in Python. It provides a familiar, non-X ML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Conceptually, Mako is an...

0.9AI score
SaveExploits0
Fedora
Fedora
added 2010/07/07 5:37 p.m.15 views

[SECURITY] Fedora 13 Update: python-mako-0.3.4-1.fc13

Mako is a template library written in Python. It provides a familiar, non-X ML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Conceptually, Mako is an...

0.9AI score
SaveExploits0
Rows per page
Query Builder