CVE-2023-4006: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16...

CVE-2023-37219

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

CVE-2023-37219: Improper Neutralization of Formula Elements in a CSV File

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

PT-2023-4136

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 3.1.16 Description The issue is related to the improper neutralization of formula elements in a CSV file, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause ...

CVE-2022-28864: Improper Neutralization of Formula Elements in a CSV File

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parameter in order to include malicious code, which is then downloaded as a .csv or .xlsx file and executed on a victim machine. Here, the...

Long term denial of service due to lack of fees in Well

Lines of code Vulnerability details Description The Well allows users to permissionless swap assets or add and remove liquidity. Users specify the intended slippage in swapFrom, in minAmountOut. The ConstantProduct2 implementation ensures Kend - Kstart = 0, where K = Reserve1 Reserve2, and the...

_normalizeDecimals() Wrong calculation formula

Lines of code Vulnerability details Impact Wrong decimal place conversion, resulting in wrong quantity Proof of Concept in callOutSignedAndBridge The number of tokens will be converted to 18 decimal when packedData is performed. function callOutSignedAndBridgebytes calldata params, DepositInput...

CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

PT-2023-25058 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue concerns improper neutralization of formula elements in a CSV file. This problem affects the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior...

CVE-2023-3493: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

GHSA-HM75-8W6H-4F8F Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability

Admidio prior to 4.2.9 is vulnerable toImproper Neutralization of Formula Elements in a CSV File...

Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability

Admidio prior to 4.2.9 is vulnerable toImproper Neutralization of Formula Elements in a CSV File...

CVE-2023-3302

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3302

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3302: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

PT-2023-24143

Name of the Vulnerable Software and Affected Versions admidio/admidio versions prior to 4.2.9 Description The issue concerns improper neutralization of formula elements in a CSV file. This problem affects the GitHub repository admidio/admidio. Recommendations For versions prior to 4.2.9, update t...

CVE-2023-3302

CVE-2023-3302 affects the open‑source Admidio member management system. The vulnerability is in the CSV handling of admidio/admidio prior to 4.2.9, caused by improper neutralization of formula elements in CSV files, which can lead to formula injection when CSV data is processed. Impact is describ...

USN-6144-1 libreoffice vulnerabilities

It was discovered that LibreOffice did not properly validate the number of parameters passed to the formula interpreter, leading to an array index underflow attack. If a user were tricked into opening a specially crafted spreadsheet file, an attacker could possibly use this issue to execute...