Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2024-9150
Disclosure Date: February 21, 2025 (last updated February 23, 2025)
Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a host system with applications high privileges.
This issue has been fixed in version 8.0.00204.0
0
Attacker Value
Unknown
CVE-2022-0896
Disclosure Date: March 09, 2022 (last updated February 23, 2025)
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.
0
Attacker Value
Unknown
CVE-2022-0323
Disclosure Date: January 21, 2022 (last updated February 23, 2025)
Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.
0
Attacker Value
Unknown
CVE-2021-39128
Disclosure Date: September 16, 2021 (last updated February 23, 2025)
Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. The affected versions of Jira Server or Data Center are before version 8.13.12, and from version 8.14.0 before 8.19.1.
0
