CWE:

	Topic	Date	Author
High	iTop Remote Command Execution	24.05.2022	Markus Krell
High	iTop < 2.7.6 - (Authenticated) Remote command execution	22.05.2022	Alexandre Zanni

---

CVEMAP Search Results

CVE

Details

Description

2022-05-05

Low

CVE-2022-27662

Vendor: F5 Software: Traffix sign...

On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

2022-01-21

Medium

CVE-2022-0323

Vendor: Mustache project Software: Mustache

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

 

---

Copyright 2022, cxsecurity.com