CVE-2017-1000039

Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution...

PT-2017-10749

Name of the Vulnerable Software and Affected Versions Framadate version 1.0 Description The issue concerns Formula Injection in the CSV Export, which could lead to Information Disclosure and Code Execution. Recommendations For Framadate version 1.0, update to a version that fixes the Formula...

Symantec Endpoint Protection Clients Local Elevation of Privilege, CSV Formula Injection

SUMMARY Symantec has released updates to address security issues reported in both Symantec Endpoint Protection 12.1 and Symantec Endpoint Protection 14.0 Windows clients. AFFECTED PRODUCTS Symantec Endpoint Protection SEP --- CVE | Affected Versions | Remediation CVE-2016-9093 CVE-2016-9094 | Pri...

PT-2017-9948

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.0 MP1 Symantec Endpoint Protection versions prior to 12.1 RU6 MP7 Description The issue concerns the export of quarantine logs in CSV format, which can potentially allow attackers to inject...

Logstash CSV Output Vulnerability - CVE pending

Summary: Logstash 2.2 and prior versions are vulnerable to a formula based injection, when using the CSV output plugin. This plugin allows users to export data in comma separated values and is susceptible to an attack if the values contained a spreadsheet formula. This vulnerability is not presen...