14940 matches found
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1870)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: ansible-core
Issue Overview: Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application...
VulnCheck KEV: CVE-2024-23692
Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request...
golang: html/template: errors returned from MarshalJSON methods may break template escaping
A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...
Cross-site Scripting in djangorestframework
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...
GHSA-GW84-84PC-XP82 Cross-site Scripting in djangorestframework
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...
UBUNTU-CVE-2024-21520
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...
CVE-2024-21520
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...
Malicious code in cra-template-snap (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4999 Malicious code in cra-template-snap (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ITLec.EmailTеmрlateManager (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in shopify-app-template-php (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3014 Malicious code in shopify-app-template-php (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2510 Malicious code in index-template-lol (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in docusaurus-2-facebook-template (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2110 Malicious code in docusaurus-2-facebook-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cagov-template-v5.5 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1857 Malicious code in cagov-template-v5.5 (npm)
--- -= Per source details. Do not edit below this line.=-...