CWE-1336: CWE-1336

This SQL injection vulnerability in Intel Neural Compressor allows authenticated local users to execute arbitrary SQL commands, potentially leading to...

This vulnerability allows authenticated users with export permissions in Kimai time-tracking software to deploy malicious Twig templates that bypass s...

Logpoint versions before 7.7.0 expose sensitive information in system processes during high CPU load conditions. This affects all Logpoint deployments...

This vulnerability allows attackers with instance configuration permissions in Canonical LXD to perform template injection when creating instance snap...

InvenTree versions before 1.2.3 have a server-side template injection vulnerability that allows staff users to modify Jinja2 templates for batch code ...

Agiloft Release 28 contains a template injection vulnerability in its EUI template engine that allows authenticated attackers to execute arbitrary cod...

This vulnerability allows authenticated users with form settings access to inject malicious Twig code into form fields like Submission Title or Succes...

Dell Data Protection Advisor versions before 19.12 contain a template engine injection vulnerability that allows low-privileged remote attackers to ac...

CVE-2024-58303 is a server-side template injection vulnerability in FoF Pretty Mail 1.1.2 that allows administrative users to inject malicious code in...

CVE-2024-58293 is a server-side template injection vulnerability in Akaunting 3.1.8 that allows authenticated administrators to execute template expre...