780 matches found
IBM Cloud Pak for Automation 安全漏洞
IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from International Business Machines IBM. The platform uses pre-integrated automation technologies and low-code tools to design, build and run automation applications and...
Discourse Security Breach
Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. A security vulnerability exists in Discourse, which stems from the fact that endpoints used to suspend users, silence users, and export CSV files do not enforce limits on the...
CVE-2023-47534
A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets...
Fortinet FortiClientEMS 安全漏洞
Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. Fortinet FortiClientEMS suffers from...
The vulnerability of the IBM Security Guardium information protection tool lies in the lack of mechanisms for neutralizing CSV files, allowing attackers to execute arbitrary commands.
The vulnerability of the IBM Security Guardium security tool lies in the absence of a mechanism to neutralize elements within the CSV file. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands by sending a specially crafted CSV file...
PT-2024-22268 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Canarytokens versions prior to sha-c595a1f8 Description: The generation of CSV files for incident history in Canarytokens is vulnerable to a CSV Injection issue. This can be exploited by an attacker who discovers an HTTP-based Canarytoken,...
CVE-2023-45597
A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “fileconfiguration” functionality of the web application concerning the function “exportfile” allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue...
PT-2024-13261 · Unknown · Ailux Imx6 Bundle
Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-1236 issue in the file configuration functionality of the web application, concerning the export file function, allows a remote authenticated attacker to inject arbitrary...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop simpleimportproduct 6.7.0 and earlier versions, which stems fr...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop baimporter versions prior to 1.1.28, which stems from a SQL...
Mapshaper Path Traversal Vulnerability
Mapshaper is a tool for editing Shapefile, GeoJSON, TopoJSON and CSV files. A path traversal vulnerability exists in Mapshaper versions prior to 0.6.44, which stems from a path traversal vulnerability in...
WordPress plugin Contact Form Entries Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
PHPJabbers Car Park Booking System Security Vulnerability
PHPJabbers Car Park Booking System is a parking lot booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Car Park Booking System version 3.0, which stems from a CSV injection vulnerability...
PHPJabbers Meeting Room Booking System Security Vulnerability
PHPJabbers Meeting Room Booking System is a meeting room booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Meeting Room Booking System version 1.0, which originates from a CSV injection vulnerability...
PHPJabbers Cinema Booking System Security Vulnerability
PHPJabbers Cinema Booking System is a theater booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Cinema Booking System version 1.0, which stems from a CSV injection vulnerability...
Night Club Booking Software Security Breach
Night Club Booking Software is a PHPJabbers open source nightclub booking software. A security vulnerability exists in version 1.0 of Night Club Booking Software, which stems from a CSV injection vulnerability...
PHPJabbers Restaurant Booking System Security Vulnerability
PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from a CSV injection vulnerability...
PHPJabbers Shared Asset Booking System Security Vulnerability
PHPJabbers Shared Asset Booking System is a shared asset booking system from PHPJabbers Serbia. A security vulnerability exists in PHPJabbers Shared Asset Booking System version 1.0, which stems from the presence of a CSV injection vulnerability...
Hotel Booking System Security Breach
Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version 4.0, which stems from a CSV injection vulnerability...
