Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:52:43 +0000 bdu:2022-02200 https://cve.radiocsirt.org/vuln/bdu:2022-02200 bdu:2022-02200 https://cve.radiocsirt.org/vuln/bdu:2022-02200 cnvd-2021-13245 https://cve.radiocsirt.org/vuln/cnvd-2021-13245 cnvd-2021-13245 https://cve.radiocsirt.org/vuln/cnvd-2021-13245 EUVD-2026-24970 https://cve.radiocsirt.org/vuln/euvd-2026-24970 EUVD-2026-24970 https://cve.radiocsirt.org/vuln/euvd-2026-24970 fkie_cve-2021-26120 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26120 <p>Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.</p> <p>Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-26120 GHSA-3rpf-5rqv-689q — PHP Code Injection by malicious function name in smarty https://cve.radiocsirt.org/vuln/ghsa-3rpf-5rqv-689q <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>Template authors could inject php code by choosing a malicous {function} name. Sites that cannot fully trust template authors should update as soon as possible. Please upgrade to 3.1.39 or higher.</p> <p><strong>Affected:</strong> Packagist: smarty/smarty</p> <p>Template authors could inject php code by choosing a malicous {function} name. Sites that cannot fully trust template authors should update as soon as possible. Please upgrade to 3.1.39 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-3rpf-5rqv-689q gsd-2021-26120 https://cve.radiocsirt.org/vuln/gsd-2021-26120 gsd-2021-26120 https://cve.radiocsirt.org/vuln/gsd-2021-26120 UBUNTU-CVE-2021-26120 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26120 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3</p> <p>Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3</p> <p>Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26120