Lucene search
+L

4 matches found

osv_alpine
osv_alpine
•added 2025/10/02 10:15 a.m.•10 views

ALPINE-CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

6.5CVSS8.3AI score0.00375EPSS
SaveExploits1References1
Mend
Mend
•added 2025/10/02 9:16 a.m.•4 views

CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

7.1CVSS8.3AI score0.00375EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•3 views

CVE-2025-54287: Improper Neutralization of Special Elements Used in a Template Engine

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

7.1CVSS8.4AI score0.00375EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
•added 2020/07/19 12:49 a.m.•44 views

Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry(CVE-2015-7548, CVE-2015-8749 CVE-2015-1850)

Summary IBM SmartClound Entry is vulnerable to several Openstack Nova vulerabilities, which could allow a local authenticated attacker or a remote attacker to obtain sensitive information Vulnerability Details CVEID: CVE-2015-8749 DESCRIPTION: OpenStack Nova could allow a remote attacker to obtai...

5.9CVSS1.2AI score0.0224EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder