Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-44381 | October CMS prior 3.4.15 Template injection (GHSA-q22j-5r3g-9hmh)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as problematic, has been found in October CMS. This issue affects some unknown processing of the component Template Handler. The manipulation leads to injection. The identification of this vulnerability is CVE-2023-44381. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2024-24764 | October CMS up to 3.5.14 october Schema redirect (GHSA-v2vf-jv88-3fp5)


📈 34.47 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-21624 | nonebot2 Message Template special elements used in a template engine (GHSA-59j8-776v-xxxg)


📈 31.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25624 | dfir-iris iris-web up to 2.4.5 Template special elements used in a template engine (GHSA-m64w-f7fg-hpcr)


📈 31.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-32651 | dgtlmoon changedetection.io up to 0.45.20 Template special elements used in a template engine (GHSA-4r7v-whpg-8rx3)


📈 31.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37301 | adfinis document-merge-service up to 6.5.1 Template special elements used in a template engine (GHSA-v5gf-r78h-55q6)


📈 31.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45053 | ethyca fides up to 2.43.x Jinja Template special elements used in a template engine (GHSA-c34r-238x-f7qx)


📈 31.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-35944 | October CMS up to 2.2.33/3.0.65 Admin Panel code injection (GHSA-x4q7-m6fp-4v9v)


📈 29.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19553 | Wireshark up to 3.0.6 CMS Dissector packet-cms-template.c injection (DLA 2547-1)


📈 28.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39258 | mailcow prior 2022-09 Swagger API Template clickjacking (GHSA-vjgf-cp5p-wm45)


📈 27.54 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4300 | FastCMS Template /template/edit injection


📈 26.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-24800 | October CMS up to 1.0.475/1.1.11/2.2.14 fromData race condition (GHSA-8v7h-cpc2-r8jp)


📈 25.58 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-2334 | Template Kit Plugin up to 1.0.14 on WordPress Template Upload cross site scripting (ID 3058805)


📈 22.69 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8304 | jpress up to 5.1.1 Template Module /admin/template/edit path traversal (Issue 189)


📈 22.69 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics Server prior 9.3.0.2/9.4.0.1 Spring Template injection


📈 21.77 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-11467 | Deskpro prior 2019.8.0 Helpdesk Interface template-sources code code injection


📈 21.77 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-24230 | Komm.One CMS 10.4.2.14 Velocity Template Engine getRuntime.exec os command injection


📈 21.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-27623 | CMS Made Simple 2.2.19 Template injection


📈 21.72 Punkte
🕵️ Sicherheitslücken

🕵️ JetBrains YouTrack Plugin up to 1.8.1.2 on Confluence Template link-text-template Remote Code Execution


📈 21.58 Punkte
🕵️ Sicherheitslücken

🔧 react-native-awesome-template: A React Native starter template to have a better product and development experience


📈 21.58 Punkte
🔧 Programmierung

🔧 Introducing Designfast Template - Minimal template designed for Service business | Easy UI Diaries | Free Templates Part-1✨


📈 21.58 Punkte
🔧 Programmierung

🕵️ CVE-2024-41950 | deepset-ai haystack up to 2.3.0 special elements used in a template engine (GHSA-hx9v-6r9f-w677)


📈 21.1 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-42355 | Shopware up to 6.5.8.12/6.6.5.0 Twig Tag sw_silent_feature_call special elements used in a template engine (GHSA-27wp-jvhw-v4xp)


📈 21.1 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-42356 | Shopware up to 6.5.8.12/6.6.5.0 context special elements used in a template engine (GHSA-35jp-8cgg-p4wj)


📈 21.1 Punkte
🕵️ Sicherheitslücken

🕵️ JetBrains YouTrack prior 2020.5.3123 Template injection


📈 20.66 Punkte
🕵️ Sicherheitslücken

💾 CMS Made Simple 2.1.6 Cross Site Scripting / Template Injection


📈 20.61 Punkte
💾 IT Security Tools

⚠️ #0daytoday #CMS Made Simple 2.1.6 Cross Site Scripting / Template Injection Vulnerabilities [#0day #Exploit]


📈 20.61 Punkte
⚠️ PoC

🕵️ e-Vision CMS 2.02 style.php template sql injection


📈 20.61 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection


📈 20.61 Punkte
⚠️ PoC

⚠️ #0daytoday #CMS Made Simple 2.1.6 - (cntnt01detailtemplate) Server-Side Template Injection Exploit [#0day #Exploit]


📈 20.61 Punkte
⚠️ PoC

💾 CMS Made Simple 2.1.6 Server-Side Template Injection


📈 20.61 Punkte
💾 IT Security Tools

⚠️ [webapps] Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated)


📈 20.61 Punkte
⚠️ PoC

💾 Grav CMS 1.7.10 Server-Side Template Injection


📈 20.61 Punkte
💾 IT Security Tools

⚠️ Grav CMS 1.7.10 Server-Side Template Injection


📈 20.61 Punkte
⚠️ PoC

⚠️ #0daytoday #Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated) Exploit [#0day #Exploit]


📈 20.61 Punkte
⚠️ PoC

💾 Winter CMS 1.2.2 Server-Side Template Injection


📈 20.61 Punkte
💾 IT Security Tools

matomo
•