Lucene search
+L

6265 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•1 views

CVE-2024-55532: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version 2.6.0. Users are recommended to upgrade to version 2.6.0, which fixes this issue...

9.8CVSS5.8AI score0.00814EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/02 11:15 p.m.•13 views

CVE-2025-1836

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted...

5.3CVSS0.00338EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/02 11:00 p.m.•60 views

CVE-2025-1836

CVE-2025-1836 affects Incorta 2023.4.3, with the vulnerability residing in the Edit Insight Handler component and specifically the manipulation of the Service Name argument, which can lead to CSV injection. The issue is exploitable remotely. Multiple connected sources confirm the condition withou...

5.3CVSS5.1AI score0.00338EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/02 11:00 p.m.•5 views

CVE-2025-1836 Incorta Edit Insight csv injection

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted...

5.3CVSS5.1AI score0.00338EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/02 11:00 p.m.•30 views

CVE-2025-1836 Incorta Edit Insight csv injection

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted...

5.3CVSS0.00338EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•1 views

CVE-2025-1836: Improper Neutralization of Formula Elements in a CSV File

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted...

5.3CVSS5.2AI score0.00338EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/27 7:15 p.m.•17 views

CVE-2025-0767

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

9.8CVSS7.2AI score0.0047EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/27 12:00 a.m.•1 views

CVE-2025-0767: Deserialization of Untrusted Data

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

9.8CVSS5.7AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•23 views

PT-2025-8980 · Unknown · Wp Activity Log

Name of the Vulnerable Software and Affected Versions: WP Activity Log version 5.3.2 Description: The issue arises from unvalidated user input being used directly in an unserialize function. This is located in the myapp/classes/Writers/class-csv-writer.php file. Recommendations: For WP Activity L...

9.8CVSS9.2AI score0.0047EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2025/02/22 12:35 a.m.•16 views

CVE-2023-51324

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

6.5CVSS7.3AI score0.00425EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:35 a.m.•18 views

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS7.3AI score0.0083EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:34 a.m.•24 views

CVE-2023-51319

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS7.3AI score0.007EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:34 a.m.•17 views

CVE-2023-51320

PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

5.3CVSS7.4AI score0.00527EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:34 a.m.•17 views

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS7.4AI score0.00701EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:33 a.m.•23 views

CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV fi...

8.8CVSS7.3AI score0.00613EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:33 a.m.•16 views

CVE-2023-51331

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

6.5CVSS7.4AI score0.00514EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/21 12:25 a.m.•19 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS7.3AI score0.00613EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/21 12:25 a.m.•17 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

4.7CVSS7.3AI score0.00408EPSS
SaveExploits2References4
NVD
NVD
•added 2025/02/20 7:15 p.m.•21 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

8.8CVSS0.00644EPSS
SaveExploits1References3
OSV
OSV
•added 2025/02/20 6:15 p.m.•18 views

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS6AI score0.0083EPSS
SaveExploits1References3
Rows per page
Query Builder