6230 matches found
WordPress WP Import – Ultimate CSV XML Importer plugin <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure vulnerability
Missing Authorization to Authenticated Subscriber+ FTP/SFTP Credential Exposure vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WP Ultimate CSV Importer versions = 7.27...
TYPO3 CSV download feature information disclosure
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...
CVE-2025-59019
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...
CVE-2025-59019 Information Disclosure via CSV Download
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...
CVE-2025-59019
Missing authorization checks in TYPO3’s CSV download feature (CVE-2025-59019) allows backend users to disclose information from arbitrary database tables within their web mounts. Affected are TYPO3 CMS versions: 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17. Root cause is an authorization ga...
PT-2025-36695
Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 11.0.0 through 11.5.47 TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17 Description: The CSV download feature lacks proper authorization checks. This allows backend users to disclose...
CVE-2025-59019: Exposure of Sensitive Information to an Unauthorized Actor
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...
CVE-2025-56267
A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...
CVE-2025-56267
A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...
CVE-2025-56267
Avigilon ACM v7.10.0.20 is vulnerable to a CSV injection in the /id_profiles API endpoint. An attacker can exploit this by supplying a crafted Excel file to execute arbitrary code . As a temporary workaround, it is recommended to restrict access to the /id_profiles API endpoint until a formal fix...
CVE-2025-56267: Improper Neutralization of Formula Elements in a CSV File
A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...
CVE-2025-58855
Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V Artprima AP HoneyPot WordPress Plugin ap-honeypot allows Reflected XSS.This issue affects AP HoneyPot WordPress Plugin: from n/a through = 1.4...
[SECURITY] Fedora 41 Update: yq-4.47.1-2.fc41
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
[SECURITY] Fedora 42 Update: yq-4.47.1-2.fc42
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
Exploit for CVE-2021-34527
A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...
Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)
The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...
Malicious code in csv-astroinformatics-docusaurus-speleology (npm)
The package csv-astroinformatics-docusaurus-speleology was found to contain malicious code...
Malicious code in ganymede-helmet-nova-csv (npm)
The package ganymede-helmet-nova-csv was found to contain malicious code...