Lucene search
+L

5275 matches found

Prion
Prion
added 2024/03/12 3:15 p.m.24 views

Input validation

A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets...

6.8CVSS9.3AI score0.01051EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 3:09 p.m.20 views

CVE-2023-47534

A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets...

9.6CVSS7.4AI score0.01051EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/12 3:09 p.m.34 views

CVE-2023-47534

A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets...

9.6CVSS9.6AI score0.01051EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/12 3:09 p.m.94 views

CVE-2023-47534

Fortinet FortiClientEMS is affected by CVE-2023-47534 due to improper neutralization of formula elements in CSV files. Affects versions 6.0.0–6.0.8, 6.2.0–6.2.9, 6.4.0–6.4.9, 7.0.0–7.0.10, and 7.2.0–7.2.2. Impact: remote code/command execution via specially crafted CSV packets. Mitigation: apply ...

9.6CVSS9.3AI score0.01051EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.10 views

PT-2024-2114 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 6.0.0 through 6.0.8 Fortinet FortiClientEMS versions 6.2.0 through 6.2.9 Fortinet FortiClientEMS versions 6.4.0 through 6.4.9 Fortinet FortiClientEMS versions 7.0.0 through 7.0.10 Fortinet FortiClientEMS...

10CVSS7.9AI score0.01051EPSS
SaveExploits0References10
NVD
NVD
added 2024/03/06 10:15 p.m.35 views

CVE-2024-28111

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

6.5CVSS6.7AI score0.00634EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/06 10:15 p.m.50 views

Input validation

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

4.3CVSS6.8AI score0.00634EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 9:15 p.m.30 views

CVE-2024-28111 CSV Injection in exported history CSV files

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

6.5CVSS7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2024/03/06 9:15 p.m.44 views

CVE-2024-28111 CSV Injection in exported history CSV files

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

6.5CVSS7AI score0.00634EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/06 9:15 p.m.21 views

CVE-2024-28111 CSV Injection in exported history CSV files

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

6.5CVSS7.3AI score0.00634EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/06 9:15 p.m.72 views

CVE-2024-28111

CVE-2024-28111 covers a CSV Injection vulnerability in Canarytokens' exported incident history CSV files. The issue affects Canarytokens.org CSV export functionality (history of incidents) where exporting to CSV and opening in a reader like Microsoft Excel can allow injection that could lead to c...

6.5CVSS6.7AI score0.00634EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/06 11:11 a.m.13 views

BIT-SUITECRM-2020-15301

SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation...

7.8CVSS7.8AI score0.00793EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:10 a.m.73 views

BIT-MOODLE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS5.5AI score0.00773EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:10 a.m.14 views

BIT-SUITECRM-2021-25960 SuiteCRM - CSV Injection in Accounts Module

In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability Formula Injection. A low privileged attacker can use accounts module to inject payloads in the input fields. When an administrator access accounts module to export the...

8CVSS7.5AI score0.01194EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:07 a.m.25 views

BIT-SYMFONY-2021-41270

Symfony/Serializer handles serializing and deserializing data structures for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Symfony versions 4.1.0 before 4.4.35 and versions 5.0.0 before 5.3.12 are vulnerable to CSV injection, also known as formula...

6.5CVSS6.5AI score0.01355EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/06 11:05 a.m.32 views

BIT-REDMINE-2020-36308

Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...

5.3CVSS5.4AI score0.00971EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:03 a.m.58 views

BIT-RESOURCESPACE-2022-31260

In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...

6.5CVSS6.6AI score0.01862EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 11:02 a.m.21 views

BIT-PHPMYADMIN-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.8CVSS8.9AI score0.01526EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 11:01 a.m.41 views

BIT-PHPLIST-2021-3188

phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...

10CVSS9.4AI score0.01788EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/06 10:58 a.m.38 views

BIT-GRAFANA-2021-43815 Grafana directory traversal for `.cvs` files

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerabili...

4.3CVSS6.5AI score0.01746EPSS
SaveExploits0References8
Rows per page
Query Builder