Design/Logic Flaw

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “fileconfiguration” functionality of the web application concerning the function “exportfile” allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue...

CVE-2023-45597

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “fileconfiguration” functionality of the web application concerning the function “exportfile” allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue...

CVE-2023-45597

The CVE-2023-45597 entry describes a CWE-1236 vulnerability in the AiLux imx6 bundle, specifically in the file_configuration/export_file function. An authenticated, remote attacker can inject arbitrary formulas into generated CSV files due to improper neutralization of formula elements in CSV out...

CVE-2024-1236 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Filterable Controls label icon parameter in all versions up to, and including, 5.9.8 due to insufficient input sanitization...

CVE-2024-1236

CVE-2024-1236 – Essential Addons for Elementor (Lite) vulnerability summary: A stored cross-site scripting flaw exists in the Filterable Controls label icon parameter, affecting all versions up to and including 5.9.8. The issue stems from insufficient input sanitization and output escaping, enabl...

WordPress Essential Addons for Elementor Plugin <= 5.9.8 is vulnerable to Cross Site Scripting (XSS)

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.8 Fixed in 5.9.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1236 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID d6ca33ddcb52 Credits Webbernaut...

CVE-2023-37219

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

Design/Logic Flaw

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

CVE-2023-37219 Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

CVE-2023-37219 Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

CVE-2023-37219

CVE-2023-37219 concerns Tadiran Telecom Composit, where the CSV processing is vulnerable to improper neutralization of formula elements (CWE-1236). The vulnerability affects the product’s CSV handling component and is characterized by a high-impact profile (confidentiality, integrity, and availab...

PT-2023-25837 · Tadiran Telecom · Tadiran Telecom Composit

Name of the Vulnerable Software and Affected Versions: Tadiran Telecom Composit affected versions not specified Description: The issue concerns improper neutralization of formula elements in a CSV file, which is classified as CWE-1236. This could potentially lead to unintended actions or data...

OPENSUSE-SU-2023:0068-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 111.0.5563.64 New View Transitions API CSS Color Level 4 New developer tools in style panel for color functionality CSS added trigonometric functions, additional root font units and extended the n-th child pseudo selector. previousslid...

Chromium: CVE-2023-1236 Inappropriate implementation in Internals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA48544 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...

Updated chromium-browser-stable packages fix security vulnerability

High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong@n3sk of Theori on 2023-01-30 High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03 High CVE-2023-1215: Type Confusion in CSS. Reported by Anonymous on 2023-02-17 High...

Debian: Security Advisory (DSA-5371-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1236

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...

CVE-2023-1236

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...

CVE-2023-1236

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...