Lucene search
+L

6270 matches found

Vulnrichment
Vulnrichment
•added 2024/07/16 5:02 p.m.•42 views

CVE-2024-3232 Formula Injection Vulnerability

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232...

7.6CVSS7AI score0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/16 5:02 p.m.•73 views

CVE-2024-3232

The CVE-2024-3232 issue affects Tenable Identity Exposure. The vulnerability is a formula injection where an authenticated, admin-level attacker can manipulate application form fields to induce another administrator to execute CSV payloads. Concrete details in connected sources indicate Tenable I...

7.6CVSS7.4AI score0.00469EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•4 views

CVE-2024-3232: Improper Neutralization of Formula Elements in a CSV File

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232...

7.6CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•24 views

How to Export Target Devices into a .CSV File

This article details how to export Target Devices from a Provisioning Services PVS database in a formatted Comma Separated Values CSV file. Requirements SQL Server Management Studio or bcp.exe, both of which are components of a full SQL Server or SQL Server Express install...

7.7AI score
SaveExploits0
OSV
OSV
•added 2024/07/09 4:15 p.m.•10 views

CVE-2024-27785

An improper neutralization of formula elements in a CSV File CWE-1236 vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports...

6.5CVSS6AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/09 4:15 p.m.•26 views

CVE-2024-27785

An improper neutralization of formula elements in a CSV File CWE-1236 vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports...

6.5CVSS0.00433EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/09 3:33 p.m.•41 views

CVE-2024-27785

An improper neutralization of formula elements in a CSV File CWE-1236 vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports...

5.4CVSS0.00433EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/09 3:33 p.m.•27 views

CVE-2024-27785

An improper neutralization of formula elements in a CSV File CWE-1236 vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports...

5.4CVSS7.1AI score0.00433EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/09 3:33 p.m.•75 views

CVE-2024-27785

CVE-2024-27785 affects Fortinet FortiAIOps 2.0.0. The flaw is improper neutralization of formula elements in CSV files, allowing a remote authenticated attacker to execute arbitrary commands on a client’s workstation via poisoned CSV reports. Exploitation requires authentication; an attacker can ...

6.5CVSS7.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-27785: Improper Neutralization of Formula Elements in a CSV File

An improper neutralization of formula elements in a CSV File CWE-1236 vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports...

6.5CVSS6.5AI score0.00433EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/07/02 9:47 p.m.•1258 views

Exploit for Race Condition in Openbsd Openssh

CVE-2024-6387-Checker This tool scans your network for hosts...

8.1CVSS8.3AI score0.99506EPSS
SaveExploits71
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•12 views

Malicious code in Be.Vlaanԁeren.Basisregisters.AspNetCore.Mvс.Formatters.Csv (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•6 views

Malicious code in Be.Vlaanԁerеn.Basisregisters.AsрNetCore.Mvс.Formatters.Csv (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 1:25 p.m.•12 views

MAL-2024-4208 Malicious code in Be.Vlaanԁerеn.Basisregisters.AsрNetCore.Mvс.Formatters.Csv (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Veracode
Veracode
•added 2024/06/21 6:08 a.m.•12 views

CSV Injection

silverstripe/framework is vulnerable to CSV injection. The vulnerability is due to the potential inclusion of executable macros and scripts in the exported CSV files, which allows an attacker to execute arbitrary code or commands on the user's system...

8.4AI score
SaveExploits0
NVD
NVD
•added 2024/06/18 6:15 a.m.•47 views

CVE-2023-5527

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...

8CVSS0.00492EPSS
SaveExploits0References5
CVE
CVE
•added 2024/06/18 5:38 a.m.•73 views

CVE-2023-5527

CVE-2023-5527 affects the Business Directory Plugin for WordPress. The vulnerability is a CSV Injection in the class-csv-exporter.php export path, allowing authenticated attackers with author-level permissions and above to inject untrusted input into CSV exports. This can lead to code execution w...

8CVSS7.8AI score0.00492EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/06/18 5:38 a.m.•44 views

CVE-2023-5527 Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...

7.4CVSS0.00492EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/06/18 5:38 a.m.•26 views

CVE-2023-5527 Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...

7.4CVSS7.6AI score0.00492EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/18 12:00 a.m.•3 views

CVE-2023-5527: Improper Neutralization of Formula Elements in a CSV File

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...

8CVSS6AI score0.00492EPSS
SaveExploits0References1
Rows per page
Query Builder