18555 matches found
CVE-2026-102146
The Kiteworks Email Protection Gateway is vulnerable to an Arbitrary File Write vulnerability caused by Server-Side Template Injection . An authenticated administrator with limited, delegated permissions can exploit this to write files with attacker-controlled content to arbitrary locations acces...
CLEANSTART-2026-QB75766 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the containerd package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CVE-2026-102991
Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...
CLEANSTART-2024-TM83377 HashiCorp Consul Template up to 0
Security vulnerability affects the consul-template package. HashiCorp Consul Template up to 0...
Exploit for CVE-2026-12227
CVE-2026-12227: Visual Composer Website Builder Unauthenticated...
CVE-2026-100280
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100280
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists that allows the creation of a project from an unreadable custom template . This issue is associated with a Missing Authorization flaw (CWE-862). No specific exploit details or remediation instructions are provided in th...
CVE-2026-100280
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
EUVD-2026-90024
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
EUVD-2026-90018
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100274
In JetBrains YouTrack versions prior to 2026.2.19197 , a project Admin can trigger a Denial of Service (DoS) condition. The root cause involves the use of a notification template . The CVSS v3.1 score is 6.5 (MEDIUM) , with a high impact on availability via a network vector requiring low privileg...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
EUVD-2026-90016
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100272
In JetBrains YouTrack versions before 2026.2.19197 , a lack of missing authorisation in the notification template preview feature allows Project Administrators to read restricted issues . The impact is categorized as High for confidentiality. Remediation is available in version 2026.2.19197 or la...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-96824
Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...
ROOT-APP-MAVEN-CVE-2026-34481 CVE-2026-34481 in org.apache.logging.log4j:log4j-layout-template-json - Patched by Root
Root has patched CVE-2026-34481 in the org.apache.logging.log4j:log4j-layout-template-json package for Root:Maven. Multiple fixed versions available...
