Lucene search
+L

848 matches found

CNNVD
CNNVD
added 2025/10/16 12:0 a.m.15 views

Webkul Software Bagisto 安全漏洞

Webkul Software Bagisto is an open source e-commerce framework from Webkul Software, India. A security vulnerability exists in Webkul Software Bagisto version 2.3.7, which stems from the server-side template engine processing uncleaned user input, and could lead to server-side template injection...

6.8CVSS8AI score0.00377EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/13 3:31 p.m.10 views

EUVD-2025-34069

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise ECE can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variables are evaluated...

9.1CVSS6.2AI score0.00578EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/13 2:15 p.m.7 views

CVE-2025-37729

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise ECE can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variables are evaluated...

7.2CVSS5.8AI score0.00578EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 1:47 p.m.4 views

CVE-2025-37729 Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise ECE can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variables are evaluated...

9.1CVSS6.3AI score0.00578EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/13 1:47 p.m.30 views

CVE-2025-37729

Elastic Cloud Enterprise (ECE) is affected by CVE-2025-37729 due to improper neutralization of Jinjava template elements. The issue allows a user with Admin access to exfiltrate sensitive information and issue commands through a specially crafted string that causes Jinjava variables to be evaluat...

9.1CVSS6.3AI score0.00578EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/13 1:47 p.m.17 views

CVE-2025-37729 Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise ECE can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variables are evaluated...

9.1CVSS0.00578EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.8 views

Elastic Cloud Enterprise 安全漏洞

Elastic Cloud Enterprise is a cloud platform from the Dutch company Elastic. It makes it easy to deploy, operate and scale Elastic Stack in the cloud. A security vulnerability exists in Elastic Cloud Enterprise that stems from improper neutralization of special elements in the template engine,...

9.1CVSS6.7AI score0.00578EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.10 views

PT-2025-41785

Name of the Vulnerable Software and Affected Versions Elastic Cloud Enterprise versions 2.5.0 through 3.8.1 Elastic Cloud Enterprise version 4.0.0 through 4.0.1 Description An issue exists in Elastic Cloud Enterprise ECE related to the improper handling of special elements within its template...

9.1CVSS7.9AI score0.00578EPSS
SaveExploits0References21
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-2287

Malware in sbrugna...

9.8CVSS9.2AI score0.01532EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-3821

Malware in sbrugna...

9.1CVSS8.2AI score0.03987EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-1137

Malware in sbrugna...

7.7CVSS6.3AI score0.007EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-51653

Malicious code in bioql PyPI...

6.7CVSS6.6AI score0.0027EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-5076

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00182EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-45883

Malicious code in bioql PyPI...

9.1CVSS8.5AI score0.00518EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-0431

Malicious code in bioql PyPI...

8.2CVSS7.2AI score0.00817EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-0447

Malicious code in bioql PyPI...

8.8CVSS5.8AI score0.00691EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-1424

Malicious code in bioql PyPI...

7.3CVSS7.3AI score0.00507EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-1885

Malicious code in bioql PyPI...

8.8CVSS5.9AI score0.01115EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-25368

Malicious code in bioql PyPI...

8.5CVSS6.6AI score0.00372EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-1726

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.02995EPSS
SaveExploits1References5
Rows per page
Query Builder