9 matches found
Exploit for Type Confusion in Handlebarsjs Handlebars
CVE-2026-33937 git bash 기준...
Tenable Nessus Network Monitor < 6.3.1 Multiple Vulnerabilities (TNS-2023-43)
Tenable Nessus Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nessus Network Monitor < 6.3.1 Multiple Vulnerabilities (TNS-2023-43)
According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-43 advisory. - Nessus Network Monitor leverages third-party software to help provide underlying...
[R1] Nessus Network Monitor 6.3.1 Fixes Multiple Vulnerabilities
R1 Nessus Network Monitor 6.3.1 Fixes Multiple Vulnerabilities Jason Schavel Wed, 11/29/2023 - 16:00 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several of the third-party components HandlebarsJS, OpenSSL, and jquery-file-upload were found to...
HandlebarsJS 4.x < 4.5.5 Regular Expression Denial Of Service
According to its self-reported version number, HandlebarsJS on the remote server is 4.x prior to 4.5.5. Therefore, it may be affected by a Regular Expression Denial Of Service ReDoS vulnerability because of eager matching. The Parser may e forced into a endless loop while processing crafted...
HandlebarsJS < 4.3.0 Prototype Pollution
According to its self-reported version number, HandlebarsJS on the remote server is prior to 4.3.0. Therefore, it may be affected by a Prototype Pollution vulnerability leading to Remote Code Execution when attackers supply crafted templates which alter a Objects proto and defineGetter properties...
HandlebarsJS 4.x < 4.5.3 Arbitrary Code Execution
According to its self-reported version number, HandlebarsJS on the remote server is prior to 3.0.8 or 4.x prior to 4.5.3. Therefore, it may be affected by a arbitrary code execution vulnerability permitting attackers to submit templates that execute aribtrary Javascript either server-side on a...
HandlebarsJS < 3.0.8 Arbitrary Code Execution
According to its self-reported version number, HandlebarsJS on the remote server is prior to 3.0.8 or 4.x prior to 4.5.3. Therefore, it may be affected by a arbitrary code execution vulnerability permitting attackers to submit templates that execute aribtrary Javascript either server-side on a...
HandlebarsJS < 4.7.7 Multiple Vulnerabilities
According to its self-reported version number, HandlebarsJS on the remote server is prior to version 4.7.7. Therefore, it may be affected by multiple vulnerabilities. - A Prototype Pollution Vulnerability when seleclecting certain compiling options to compile templates originating from untrusted...