Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Ejs
CRITICAL 9.8
CVE-2023-29827EPSS 6%
ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the config…
Patch available
Fix from $2,300
2023-05-04
Ejs
CRITICAL 9.8
CVE-2022-29078EPSS 33%
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionN…
Patch available
Fix from $2,300
2022-04-25
Ejs
CRITICAL 9.8
CVE-2017-1000228EPSS 6%
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
Fix: 2.5.3+
Fix from $2,300
2017-11-17
Ejs
HIGH 7.5
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
Fix: 2.5.5+
Fix from $1,950
2017-11-17
Ejs
MEDIUM 6.1
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
Fix: 2.5.5+
Fix from $1,600
2017-11-17