2404 matches found
CVE-2020-7049
Nozomi Networks OS before 19.0.4 allows //network?tab=networknodelist.html CSV Injection...
Input validation
Nozomi Networks OS before 19.0.4 allows //network?tab=networknodelist.html CSV Injection...
CVE-2020-7049
Summary: CVE-2020-7049 affects Nozomi Networks OS prior to version 19.0.4 and enables CSV injection via the path /#/network?tab=network_node_list.html. The provided documents name this as a CSV injection vulnerability in Nozomi Networks OS, with the affected state clearly tied to versions before ...
CVE-2020-7049
Nozomi Networks OS before 19.0.4 allows //network?tab=networknodelist.html CSV Injection...
CVE-2020-7049: Improper Neutralization of Formula Elements in a CSV File
Nozomi Networks OS before 19.0.4 allows //network?tab=networknodelist.html CSV Injection...
PT-2020-19357
Name of the Vulnerable Software and Affected Versions Nozomi Networks OS versions prior to 19.0.4 Description The issue allows for CSV Injection via the //network?tab=network node list.html endpoint. Recommendations For versions prior to 19.0.4, update to version 19.0.4 or later to resolve the...
CVE-2020-13247
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...
Design/Logic Flaw
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...
CVE-2020-13247
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...
CVE-2020-13247
BooleBox Secure File Sharing Utility (before 4.2.3.0) is affected by two CVEs in the dataset: CVE-2020-13247 enables CSV injection via a crafted username exported from activity logs in Audit Area; CVE-2020-13248 enables stored XSS via a crafted avatar field in My Account JSON data to Account.aspx...
CVE-2020-13247: Improper Neutralization of Formula Elements in a CSV File
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area...
PT-2020-13394
Name of the Vulnerable Software and Affected Versions BooleBox Secure File Sharing Utility versions prior to 4.2.3.0 Description The issue allows for CSV injection through a crafted user name that is mishandled during export from the activity logs in the Audit Area. Recommendations For versions...
CVE-2017-18900
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
CVE-2017-18900
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
Input validation
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
CVE-2017-18900
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
CVE-2017-18900
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
PT-2020-8446
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 4.1.0 Mattermost Server version 4.0.4 and earlier Mattermost Server version 3.10.3 and earlier Description: An issue allows CSV injection via a compliance report. Recommendations: For versions prior to 4.1....
CVE-2017-18900: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report...
