Lucene search
+L

430 matches found

Positive Technologies
Positive Technologies
added 2025/11/28 12:0 a.m.9 views

PT-2025-48337

Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description A CSV formula injection issue exists in HCL Technologies Ltd. Unica. The issue allows for potential manipulation through crafted CSV files. Recommendations At the moment, there is no...

7.5CVSS6.8AI score0.00302EPSS
Exploits0References5
OSV
OSV
added 2025/10/16 8:48 p.m.3 views

GHSA-JQRP-58FV-W8CQ bagisto has CSV Formula Injection in Create New Product

Summary When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This allows an attacker to supply a CSV field e.g.,...

9CVSS7.2AI score0.00366EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/10/16 6:32 p.m.3 views

CVE-2025-62417 bagisto - CSV Formula Injection in Create New Product

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...

8.5CVSS6.7AI score0.00366EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/16 6:32 p.m.11 views

CVE-2025-62417 bagisto - CSV Formula Injection in Create New Product

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...

8.5CVSS0.00366EPSS
Exploits1References1
CVE
CVE
added 2025/10/16 6:32 p.m.12 views

CVE-2025-62417

Bagisto (open-source Laravel eCommerce platform) is affected by CVE-2025-62417 due to improper handling of leading spreadsheet formula characters (e.g., =, +, -, @) in CSV data, allowing formulas to be interpreted when a CSV is opened in spreadsheet software. This leads to potential data exfiltra...

8.5CVSS6.7AI score0.00366EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/10/16 6:32 p.m.5 views

CVE-2025-62417 bagisto - CSV Formula Injection in Create New Product

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...

8.5CVSS7.1AI score0.00366EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/10/15 4:43 p.m.6 views

CVE-2025-11498

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attacker...

6.1CVSS6.8AI score0.00297EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 12:42 p.m.4 views

CVE-2025-11498 CSV Formula Injection Vulnerability

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attack...

6.1CVSS6.4AI score0.00297EPSS
Exploits0References1
CVE
CVE
added 2025/10/14 12:42 p.m.13 views

CVE-2025-11498

CVE-2025-11498 affects the System Diagnostics Manager (SDM) component of B&R Automation Runtime before 6.4. The issue is an Improper Neutralization of Formula Elements in a CSV File, allowing a remote attacker to inject formula data into a generated CSV. Exploitation requires the attacker to craf...

6.1CVSS6.4AI score0.00297EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 12:42 p.m.12 views

CVE-2025-11498 CSV Formula Injection Vulnerability

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attack...

6.1CVSS0.00297EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-25880

Malware in sbrugna...

9CVSS7AI score0.02747EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2020-10148

Malware in sbrugna...

6.1CVSS6.1AI score0.01182EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-22954

Malware in sbrugna...

6.8CVSS6.6AI score0.00703EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-10559

Malware in sbrugna...

7.8CVSS7.6AI score0.01259EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-18132

Malware in sbrugna...

7.8CVSS7.7AI score0.00898EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-0241

Malware in sbrugna...

8.8CVSS8.4AI score0.01051EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-1821

Malware in sbrugna...

8.8CVSS8.6AI score0.0106EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-1366

Malware in sbrugna...

9.8CVSS9.5AI score0.02625EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-24876

Malware in sbrugna...

7.8CVSS7.7AI score0.00479EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-10381

Malware in sbrugna...

8CVSS7.8AI score0.00402EPSS
Exploits0References4
Rows per page
Query Builder