CVE-2024-33146

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

CVE-2023-48841

Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2021-4412

The WP Prayer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5. This is due to missing or incorrect nonce validation on the save and export functions. This makes it possible for unauthenticated attackers to save plugin settings and trigger a...

CVE-2019-17294

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user...

CVE-2019-12961

LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function...

Apache Ranger security vulnerabilities

Apache Ranger is a set of architectures from the Apache USA Foundation that implement comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. A...

CVE-2023-34406

An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG New Telematics Generation 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the...

CVE-2024-11134

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eventerexportbookingscsv' function in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers with subscriber-level permissions or above, to...

CVE-2025-23007: Improper Privilege Management

A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation...

UserData service Import Export DoS

The vulnerability of the import/export function of the UserData service in the Mercedes-Benz MBUX multimedia system is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2024-12713

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handleexportform function due to a missing capability check. This makes it possible for unauthenticated attackers to export data...

WordPress plugin WP BASE Booking of Appointments, Services and Events has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-36400

Name of the Vulnerable Software and Affected Versions MISP versions 2.5.2 and earlier Description The issue is related to stored Cross Site Scripting XSS in the MISP Galaxy Cluster Export Function. This occurs when exporting custom clusters into the misp-galaxy format. The file...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

PT-2024-26496

Name of the Vulnerable Software and Affected Versions vmir version e8117 Description A segmentation violation was discovered in the export function at /src/vmir wasm parser.c. This issue affects the export function, which is located in the /src/vmir wasm parser.c file. Recommendations For version...

VMIR security vulnerabilities

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the exportfunction function...

FFmpeg libavfilter/vfsignature.c Heap Buffer Overflow DoS

The vulnerability of the export function in the libavfilter/vfsignature.c component of the FFmpeg multimedia library relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its...

PT-2024-33682 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue is related to poor input validation in the export functionality, allowing an authenticated user to perform a SQL injection attack. The current post...