共收录 172 条相关情报。
← 返回所有主题CVE-2026-107264
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field all
CVE-2026-107259
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code I
CVE-2026-61707
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,
CVE-2026-119144
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because
CVE-2026-118803
Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous
CVE-2026-115223
The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being store
CVE-2026-115938
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev
CVE-2026-55486
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0
CVE-2026-96392
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code In
CVE-2026-96355
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject
CVE-2026-96355
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject
CVE-2026-96355
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject
CVE-2026-55240
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in s
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection v
CVE-2026-103849
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha
CVE-2026-109652
Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because u
CVE-2026-109305
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables
CVE-2026-109305
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables
CVE-2026-108570
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the
CVE-2026-108264
Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to