Lucene search
K

102 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:51 a.m.10 views

CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

9.8CVSS7.1AI score0.0992EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-26498

Malware in sbrugna...

7.5CVSS7.5AI score0.02914EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-17861

Malware in sbrugna...

7.8CVSS7.6AI score0.00156EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-23152

Malware in sbrugna...

9.8CVSS8.1AI score0.04459EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-2594

Malware in sbrugna...

9.8CVSS9.2AI score0.0992EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/30 8:56 p.m.6 views

CVE-2025-35033

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

6.3CVSS7.1AI score0.00039EPSS
Exploits0References1
OSV
OSV
added 2025/09/29 8:15 p.m.0 views

CVE-2025-35033

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

4.3CVSS5.8AI score0.00039EPSS
Exploits0References2
CVE
CVE
added 2025/09/29 8:1 p.m.8 views

CVE-2025-35033

CVE-2025-35033 concerns Medical Informatics Engineering Enterprise Health. Affected: the platform's CSV export/download feature allowing a remote, authenticated attacker to inject macros into downloadable CSV files (CSV injection). Root cause details are not expanded in the provided documents bey...

6.3CVSS6.7AI score0.00039EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/29 8:1 p.m.1 views

CVE-2025-35033 Medical Informatics Engineering Enterprise Health CSV injection

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...

6.3CVSS6.7AI score0.00039EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/09/16 5:44 p.m.193 views

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit !Rust...

10CVSS8.8AI score0.94361EPSS
Exploits23
RedhatCVE
RedhatCVE
added 2025/05/22 7:42 p.m.5 views

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

9.8CVSS6.7AI score0.04459EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:35 p.m.2 views

CVE-2020-9347

Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...

9.8CVSS7.2AI score0.02316EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:10 p.m.5 views

CVE-2020-35481

SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection...

9.8CVSS6.9AI score0.04459EPSS
Exploits0
NVD
NVD
added 2023/09/06 7:15 p.m.7 views

CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

9.8CVSS9.6AI score0.0992EPSS
Exploits0References1
OSV
OSV
added 2023/09/06 7:15 p.m.1 views

CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

9.8CVSS5.8AI score0.0992EPSS
Exploits0References1
Prion
Prion
added 2023/09/06 7:15 p.m.14 views

Design/Logic Flaw

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

7.5CVSS9.4AI score0.0992EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/09/06 6:47 p.m.34 views

CVE-2020-10131

CVE-2020-10131 affects SearchBlox prior to version 9.2.1, where a CSV macro injection in the “Featured Results” parameter can be triggered, leading to high-impact outcomes (per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8). Connected feeds corroborate vulnerability in SearchBlox ...

9.8CVSS9.7AI score0.0992EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/06 6:47 p.m.9 views

CVE-2020-10131 CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

7.1AI score0.0992EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/06 6:47 p.m.15 views

CVE-2020-10131 CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter...

9.6AI score0.0992EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/09/06 12:0 a.m.1 views

SearchBlox Security Breach

SearchBlox is an application from US-based SearchBlox, Inc. provides a powerful enterprise search architecture for on-premise or cloud deployments. A security vulnerability exists in SearchBlox versions prior to 9.2.1. An attacker can exploit the vulnerability to perform a CSV macro injection...

9.8CVSS7.1AI score0.0992EPSS
Exploits0References2
Rows per page
Query Builder