7132 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-36308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
Linux Distros Unpatched Vulnerability : CVE-2018-13421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fast C++ CSV Parser aka fast-cpp-csv-parser before 2018-07-06 has a heap-based buffer over-read in io::trimchars in csv.h. CVE-2018-13421 Note that Nessus relie...
CVE-2025-55745
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to inject malicious content into exported...
CVE-2025-55745 UnoPim Quick Export feature is vulnerable to CSV injection
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to inject malicious content into exported...
UnoPim security vulnerabilities
UnoPim is an open source Product Information Management PIM system based on the Laravel framework by UnoPim Open Source. A security vulnerability exists in UnoPim 0.3.0 and earlier versions, which stems from CSV injection and could lead to remote code execution...
CVE-2025-55745: Improper Neutralization of Formula Elements in a CSV File
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to inject malicious content into exported...
CVE-2025-9241
A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited...
CVE-2025-9241 elunez eladmin exportUser csv injection
A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited...
CVE-2025-9241: Improper Neutralization of Formula Elements in a CSV File
A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited...
ELADMIN security vulnerabilities
ELADMIN is a backend management system for elunez personal developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from the exportUser function not escaping and filtering exported CSV content, which allows remote attackers to inject malicious CSV loads...
Exploit for CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments...
Linux Distros Unpatched Vulnerability : CVE-2018-11652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...
Malicious code in csv-hermes-cryonics-solis (npm)
The package csv-hermes-cryonics-solis was found to contain malicious code...
MAL-2025-40690 Malicious code in yyf-csv (npm)
The package yyf-csv was found to contain malicious code...
MAL-2025-17804 Malicious code in csv-mineralogy-pm2-transform (npm)
The package csv-mineralogy-pm2-transform was found to contain malicious code...
MAL-2025-17801 Malicious code in csv-cosmicray-mui-spica (npm)
The package csv-cosmicray-mui-spica was found to contain malicious code...
MAL-2025-17803 Malicious code in csv-jekyll-equinox-pegasus (npm)
The package csv-jekyll-equinox-pegasus was found to contain malicious code...
MAL-2025-17805 Malicious code in csv-module-mocha-lyra (npm)
The package csv-module-mocha-lyra was found to contain malicious code...