Browse and filter security vulnerabilities across ecosystems
Browse and filter security vulnerabilities across ecosystems
Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf
Improper restriction of the scope of accessible objects in Thymeleaf expressions
OpenRemote is Vulnerable to Expression Injection
DiscussionTools should use better regex
Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables
Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux
Improper Neutralization of Special Elements in OnlineSuite
IBM Cognos Analytics expression language injection
JaninoEventEvaluator vulnerability
Reflected XSS in PaperCut MF
DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection
EL Injection Vulnerability in Hitachi Tuning Manager
Improper Neutralization of Special Elements in mintplex-labs/anything-llm
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability
EL Injection Vulnerability in Hitachi Global Link Manager
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
SOFARPC Remote Command Execution (RCE) Vulnerability
EL Injection Vulnerability in Hitachi Replication Manager
Apache Ambari: Allows authenticated metrics consumers to perform RCE
Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.
Showing 1 - 20 of 1,000+ results