smarty smarty

Name: smarty smarty
Brand: smarty

productUS

cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical22high6medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-1669US	high10.0	14.1% (97th)	Exploit	no fix	2009-05-18	= 2.6.22
CVE-2022-29221US	high8.8	4.91% (92nd)	Exploit	3.1.45	2022-05-24	2 versions
CVE-2023-28447US	medium6.1	1.02% (63rd)	Exploit	3.1.48	2023-03-28	2 versions
CVE-2021-26120US	critical9.8	82.3% (100th)	—	3.1.39	2021-02-22	< 3.1.39
CVE-2021-26119US	high7.5	8.49% (95th)	—	3.1.39	2021-02-22	< 3.1.39
CVE-2018-13982US	high7.5	3.46% (89th)	—	3.1.33	2018-09-18	< 3.1.33
CVE-2014-8350US	high7.5	3.13% (88th)	—	no fix	2014-11-03	84 versions
CVE-2017-1000480US	critical9.8	3.12% (88th)	—	3.1.32	2018-01-03	3.0.0 → 3.1.32
CVE-2018-16831US	medium5.9	2.66% (86th)	—	no fix	2018-09-11	3.0.0 → 3.1.32
CVE-2012-4437US	medium4.3	2.46% (84th)	—	no fix	2012-10-01	75 versions
CVE-2008-4810US	high7.5	2.19% (82nd)	—	no fix	2008-10-31	49 versions
CVE-2009-5053US	high7.5	2.09% (82nd)	—	no fix	2011-02-03	56 versions
CVE-2021-21408US	high8.8	2.08% (81st)	—	4.0.3	2022-01-10	2 versions
CVE-2008-1066US	high7.5	1.95% (80th)	—	no fix	2008-02-28	≤ 2.6.18
CVE-2010-4727US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2010-4726US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2010-4725US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2010-4724US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2010-4722US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2009-5052US	high10.0	1.88% (79th)	—	no fix	2011-02-03	56 versions
CVE-2021-29454US	high8.8	1.80% (78th)	—	3.1.42	2022-01-10	2 versions
CVE-2006-7105US	high7.5	1.77% (78th)	—	no fix	2007-03-03	= 2.6.9
CVE-2010-4723US	high9.3	1.66% (77th)	—	no fix	2011-02-03	56 versions
CVE-2008-4811US	high7.5	1.64% (76th)	—	no fix	2008-10-31	49 versions
CVE-2011-1028US	critical9.8	1.61% (76th)	—	3.0.7	2019-11-20	3.0.0 → 3.0.7
CVE-2009-5054US	high7.5	1.59% (76th)	—	no fix	2011-02-03	54 versions
CVE-2005-0913US	high7.5	1.53% (75th)	—	no fix	2005-05-02	6 versions
CVE-2006-7193US	high7.5	1.48% (74th)	—	no fix	2007-04-12	= 2.6.1
CVE-2012-4277US	medium4.3	1.25% (69th)	—	no fix	2012-08-13	71 versions
CVE-2018-25047US	medium5.4	1.10% (66th)	—	3.1.47	2022-09-15	2 versions
CVE-2023-41661US	medium4.8	0.42% (36th)	—	no fix	2023-09-29	≤ 3.1.35

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')9 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-264CWE-2644 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan