Lucene search
+L

537 matches found

Cvelist
Cvelist
•added 2017/07/13 8:00 p.m.•32 views

CVE-2017-1000039

Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution...

9.6AI score0.02625EPSS
SaveExploits0References1
Mend
Mend
•added 2017/07/13 8:00 p.m.•7 views

CVE-2017-1000039

Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution...

9.8CVSS0.02625EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/07/13 12:00 a.m.•9 views

PT-2017-10749

Name of the Vulnerable Software and Affected Versions Framadate version 1.0 Description The issue concerns Formula Injection in the CSV Export, which could lead to Information Disclosure and Code Execution. Recommendations For Framadate version 1.0, update to a version that fixes the Formula...

9.8CVSS0.02625EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/03/27 5:59 p.m.•36 views

CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

6.1CVSS6.7AI score0.01486EPSS
SaveExploits0References3
Prion
Prion
•added 2017/03/27 5:59 p.m.•33 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

4.3CVSS6.1AI score0.01486EPSS
SaveExploits0References5Affected Software2
osv_ubuntu
osv_ubuntu
•added 2017/03/27 5:59 p.m.•16 views

UBUNTU-CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

6.1CVSS6.7AI score0.01486EPSS
SaveExploits0References4
Mend
Mend
•added 2017/03/27 5:00 p.m.•7 views

CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

6.1CVSS0.01486EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2017/03/27 5:00 p.m.•71 views

CVE-2015-8010

Removed by vendor...

6.1CVSS6.6AI score0.01486EPSS
SaveExploits0
Mend
Mend
•added 2017/02/25 12:00 a.m.•6 views

WS-2017-3793

In weblate in versions weblate-2.10 to weblate-2.13 is vulnerable to CSV Injection with the CSV export feature...

6.9CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2017/02/21 7:59 a.m.•35 views

CVE-2017-6095

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

9.8CVSS9.8AI score0.05643EPSS
SaveExploits7References3
osv_cve
osv_cve
•added 2017/02/21 7:59 a.m.•23 views

CVE-2017-6095

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

9.8CVSS5.8AI score0.05643EPSS
SaveExploits7References3
Cvelist
Cvelist
•added 2017/02/21 7:46 a.m.•57 views

CVE-2017-6095

A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...

9.8AI score0.05643EPSS
SaveExploits7References3
n0where
n0where
•added 2017/01/31 5:43 a.m.•47 views

AD ACL Scanner

AD ACL Scanner AD ACL Scanner is a tool completly written in PowerShell with GUI used to create reports of access control lists DACLs and system access control lists SACLs in Active Directory . New Features Faster compare of Access Control Lists using USN from replication metadata. Primary...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2016/09/22 12:00 a.m.•40 views

UDAdmin.exe tool has been enhanced for better reporting and exporting of User Device License usage

Question: How to check license usage in Xendesktop/Xenapp with the enhanced UDAdmin.exe tool for reporting and monitoring? Answer: With License Server 11.14.0.1 Build 23101, some enhancements have been made to the UDAdmin command for better reporting of User Device License usage. The enhancements...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2016/08/23 12:00 a.m.•25 views

WordPress Plugin Mail Masta 1.0 - Local File Inclusion

WordPress Plugin Mail Masta 1.0 - Local File Inclusion + Date: 23-8-2016 + Autor Guillermo Garcia Marcos + Vendor: https://downloads.wordpress.org/plugin/mail-masta.zip + Title: Mail Masta WP Local File Inclusion + info: Local File Inclusion The File Inclusion vulnerability allows an attacker to...

7.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2016/04/25 10:11 p.m.•21 views

IPGeoLocation - A tool to retrieve IP Geolocation information

A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x Features Retrieve IP or Domain Geolocation. Retrieve your own IP Geolocation. Retrieve Geolocation for IPs or Domains loaded from file. Each target in new line. Define your own custom User Agent string. Select...

7.1AI score
SaveExploits0References1
Prion
Prion
•added 2016/04/11 9:59 p.m.•26 views

Design/Logic Flaw

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS7.9AI score0.02109EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2016/04/11 9:00 p.m.•49 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

7.9AI score0.02109EPSS
SaveExploits0References3
Mend
Mend
•added 2016/04/11 9:00 p.m.•7 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS0.02109EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2016/04/11 9:00 p.m.•50 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS7.9AI score0.02109EPSS
SaveExploits0
Rows per page
Query Builder