injection vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled....

Sqlalchemy Sqlalchemy 1.2.17 Debian Debian Linux 8.0

7.5

CVSSv2

** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION...

Pocoo Jinja2 2.101 EDB exploit available1 Github repository available

6.8

CVSSv2

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection....

Yaws Yaws

4.6

CVSSv2

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91....

Gnome Evince

6.8

CVSSv2

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example,...

Google Chrome

5.8

CVSSv2

Autobahn|Python before 20.12.3 allows redirect header injection....

Crossbar Autobahn

4.3

CVSSv2

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This...

Mozilla Firefox

10

CVSSv2

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user....

Cobbler Project Cobbler

4.3

CVSSv2

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection...

Ejs Ejs1 Github repository available

6.8

CVSSv2

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects...

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Server Eus 7.5 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Mozilla Firefox Mozilla Firefox Esr

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook