Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2023-21640

Buffer Copy Without Checking Size of Input in Linux

Description: Memory corruption in Linux when the file upload API is called with parameters having large buffer.

CVSS: MEDIUM (6.7)

EPSS Score: 0.04%

Source: CVE

November 27th, 2024 (6 months ago)

CVE-2023-2142

Nunjucks autoescape bypass leads to cross site scripting

Description: In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two user-controlled parameters on the same line used in the views, it was possible to inject cross site scripting payloads using the backslash \ character.

CVSS: MEDIUM (6.1)

EPSS Score: 0.04%

Source: CVE

November 27th, 2024 (6 months ago)