9601 matches found
CVE-2026-19501
CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...
CVE-2026-19501 CVE-2026-19501
CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...
CVE-2026-19501
CVE-2026-19501 is a CSV injection vulnerability in the Brainstorm Force SureForms WordPress plugin (versions ≤ 2.12.1). The CSV export functionality fails to sanitize spreadsheet formula characters in user-controlled form field names, allowing a remote attacker to inject formulas that execute on ...
CVE-2026-19501
CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...
EUVD-2026-60962
CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...
EUVD-2026-60798
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
PT-2026-78035
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw exists in the Export component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with network access via HTTP can exploit this issue to compromise the system...
PT-2026-77149
Name of the Vulnerable Software and Affected Versions Brainstorm Force SureForms versions prior to 2.12.2 Description The CSV export functionality fails to neutralize spreadsheet formula characters in user-controlled form field names before generating exports. This allows a remote attacker to...
PT-2026-77339
Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology Outside In PDF Export SDK version 8.5.8 Description An issue in the Outside In PDF Export SDK allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the syste...
python313-tablib-3.10.0-1.1 on GA media (moderate)
python313-tablib-3.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11533-1 Rating: moderate Cross-References: CVE-2026-9318 CVSS scores: CVE-2026-9318 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-9318 SUSE : 5.3...
CVE-2026-63667
ApostropheCMS versions before 3.6.2 are vulnerable to arbitrary file read via path traversal in the import-export module. The file packages/import-export/lib/formats/gzip.js builds an attachment source path using attacker-controlled _id, name, and extension fields from aposAttachments.json withou...
CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal
ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...
NPM: Etherpad has stored XSS in HTML export via unescaped attribute-pool values
NPM: Etherpad has stored XSS in HTML export via unescaped attribute-pool values vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 1.8.14...
Etherpad has stored XSS in HTML export via unescaped attribute-pool values
Fix: PR 7905 ether/etherpad. getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data-="" without HTML-attribute escaping. The value comes verbatim from the pad attribute pool, which a pad editor controls via a craft...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
EUVD-2026-60255
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75056
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...