Lucene search
+L

1005 matches found

Amazon
Amazon
added 2025/04/01 12:0 a.m.7 views

Low: python3.9

Issue Overview: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header bein...

2.3CVSS6.8AI score0.006EPSS
SaveExploits0
Amazon
Amazon
added 2025/04/01 12:0 a.m.7 views

Low: python3

Issue Overview: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header bein...

2.3CVSS6.9AI score0.006EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.4 views

WordPress plugin Import Export Suite for CSV and XML Datafeed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.1CVSS8.2AI score0.01058EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/03/21 2:17 p.m.6 views

Security update for python311

This update for python311 fixes the following issues: CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers bsc1238450. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

3.1CVSS4.3AI score0.006EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2025/03/17 3:21 p.m.2 views

Security update for python312

This update for python312 fixes the following issues: CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers bsc1238450. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

3.1CVSS4.3AI score0.006EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:0 a.m.8 views

The vulnerability of the MFlash secure data exchange platform lies in the lack of mechanisms for neutralizing elements related to CSV files, allowing attackers to execute arbitrary commands.

The vulnerability of the MFlash secure messaging platform is related to the lack of mechanisms for neutralizing elements related to CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.7 views

The vulnerability of the KWHotel software for hotel management lies in the lack of a mechanism to neutralize elements in the CSV file, allowing a hacker to trigger a service failure.

The vulnerability of the KWHotel hotel management software is related to the lack of mechanisms for neutralizing elements in the CSV file. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

10CVSS5.5AI score0.00479EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2025/03/05 2:31 a.m.7 views

SUSE CVE-2025-1795

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

3.1CVSS6.9AI score0.006EPSS
SaveExploits0References12
Snyk
Snyk
added 2025/03/03 6:31 p.m.3 views

CSV Injection

Overview Affected versions of this package are vulnerable to CSV Injection in the ServiceDBStore when exporting a CSV. Remediation Upgrade org.apache.ranger:security-admin-web to version 2.6.0 or higher. References - Apache Jira Issues - GitHub Commit - GitHub Commit - OSS Security Advisory -...

9.8CVSS7.2AI score0.00724EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.8 views

Apache Ranger 安全漏洞

Apache Ranger is a set of architectures from the Apache USA Foundation that implement comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. A...

9.8CVSS6.4AI score0.00724EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.3 views

Incorta 安全漏洞

Incorta is an enterprise-grade data analytics and business intelligence platform from Incorta USA that rapidly enables data insights and decision support. A security vulnerability exists in Incorta version 2023.4.3, which stems from improper handling of the Service Name parameter in the Edit...

5.3CVSS5AI score0.00312EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/28 7:15 p.m.2 views

DEBIAN-CVE-2025-1795

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

2.3CVSS6.1AI score0.006EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 7:15 p.m.5 views

UBUNTU-CVE-2025-1795

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

2.3CVSS6.7AI score0.006EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/28 6:59 p.m.21 views

PSF-2025-3

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

2.3CVSS6.4AI score0.006EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/20 7:15 p.m.6 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

8.8CVSS6AI score0.00621EPSS
SaveExploits1References3
OSV
OSV
added 2025/02/20 4:15 p.m.5 views

CVE-2023-51331

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

6.5CVSS5.9AI score0.00496EPSS
SaveExploits2References3
OSV
OSV
added 2025/02/20 4:15 p.m.7 views

CVE-2023-51319

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS5.9AI score0.00675EPSS
SaveExploits2References3
OSV
OSV
added 2025/02/20 3:15 p.m.5 views

CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV fi...

8.8CVSS5.9AI score0.00591EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.7 views

PT-2025-7316 · Phpjabbers · Phpjabbers Meeting Room Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Meeting Room Booking System version 1.0 Description: The issue is related to a CSV Injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation on the...

8.8CVSS7.6AI score0.00621EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.8 views

PT-2025-7302 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue allows an attacker to execute remote code due to insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to...

8.8CVSS8AI score0.00675EPSS
SaveExploits2References5
Rows per page
Query Builder