1297 matches found
CVE-2022-34000
libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...
CVE-2021-32818
haml-coffee is a JavaScript templating solution. haml-coffee mixes pure template data with engine configuration options through the Express render API. More specifically, haml-coffee supports overriding a series of HTML helper functions through its configuration options. A vulnerable application...
CVE-2020-23986
Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting XSS vulnerability via the function renderError...
Malicious code in com.unity.render-pipelines.universal-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e796de3cb6203dc09766f14c46913307a4c760e4cd01047b30993c7ac605648c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
React Router allows pre-render data spoofing on React-Router framework mode
Summary After some research, it turns out that it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values of the data object passed to the HTML. Latest versions are impacted. Details The vulnerable header i...
Path Traversal
org.noear:solon-view is vulnerable to path traversal. The vulnerability is due to insufficient validation of user input in the rendermav function, which allows the manipulation of the template argument to perform path traversal...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderFormField function in templatefunc.go. If an application is using RenderForm, an attacker can execute scripts by supplying malicious input in fields like DisplayName. Details Cross-site scripting or...
Cross-site Scripting (XSS)
Overview github.com/beego/beego/v2/server/web is an open-source, high-performance, modular, full-stack web framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderFormField function in templatefunc.go. If an application is using RenderForm, an attacker...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal through the rendermav function. An attacker can access or modify files on the server by manipulating the input to traverse outside the intended directory structure. Remediation Upgrade org.noear:solon-view-beetl ...
CVE-2025-2961
OpenSolon (up to 3.1.0) contains a path traversal flaw in render_mav of RenderManager (org.noear.solon.core.handle.RenderManager). By manipulating the template argument (example: ../org/example/HelloApp.class), an attacker can cause path traversal to ../filedir; the vulnerability is exploitable r...
CVE-2025-30558
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...
CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render allows Stored XSS. This issue affects ANAC XML Render: from n/a through 1.5.7...
CVE-2025-30558
CVE-2025-30558 : A CSRF flaw in the WordPress plugin ANAC XML Render (vendor: EnzoCostantini55) could enable a stored XSS. Affected versions are listed as
CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...
WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin ANAC XML Render versions = 1.5.7...
WordPress plugin ANAC XML Render 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
MAL-2025-2563 Malicious code in byted-midas-render-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b801b5ca095df1e96b38bfc8f414ed583b82378f669eea2e6028157e2dbecc94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in byted-midas-render-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b801b5ca095df1e96b38bfc8f414ed583b82378f669eea2e6028157e2dbecc94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...