MAL-2025-45947 Malicious code in sagitta-phoebe-paleoecology-csv (npm)

The package sagitta-phoebe-paleoecology-csv was found to contain malicious code...

Malicious code in protractor-phoebe-antares-csv (npm)

The package protractor-phoebe-antares-csv was found to contain malicious code...

MAL-2025-43915 Malicious code in csv-readable-exosphere-style-loader (npm)

The package csv-readable-exosphere-style-loader was found to contain malicious code...

MAL-2025-43893 Malicious code in cordelia-csv-nightmare-exosphere (npm)

The package cordelia-csv-nightmare-exosphere was found to contain malicious code...

Malicious code in ophiuchus-csv-husky-levels (npm)

The package ophiuchus-csv-husky-levels was found to contain malicious code...

MAL-2025-44371 Malicious code in ganymede-helmet-nova-csv (npm)

The package ganymede-helmet-nova-csv was found to contain malicious code...

Malicious code in cordelia-csv-nightmare-exosphere (npm)

The package cordelia-csv-nightmare-exosphere was found to contain malicious code...

MAL-2025-45464 Malicious code in ophiuchus-csv-husky-levels (npm)

The package ophiuchus-csv-husky-levels was found to contain malicious code...

MAL-2025-45611 Malicious code in protractor-phoebe-antares-csv (npm)

The package protractor-phoebe-antares-csv was found to contain malicious code...

MAL-2025-45585 Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)

The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...

CVE-2025-58855

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V Artprima AP HoneyPot WordPress Plugin ap-honeypot allows Reflected XSS.This issue affects AP HoneyPot WordPress Plugin: from n/a through = 1.4...

CVE-2025-58855

CVE-2025-58855 affects AP HoneyPot WordPress Plugin (Versions up to 1.4). Public records describe an improper neutralization of formula elements in a CSV file leading to reflected XSS, and related sources also flag a CSRF vulnerability in the plugin’s CSRF handling. The combination implies an imp...

Linux Distros Unpatched Vulnerability : CVE-2021-43815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv...

Linux Distros Unpatched Vulnerability : CVE-2023-5541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content. CVE-2023-5541 Note that Nessus relies on...

CVE-2025-39245

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data...

Linux Distros Unpatched Vulnerability : CVE-2023-36250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new...

Linux Distros Unpatched Vulnerability : CVE-2019-20184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KeePass 2.4.1 allows CSV injection in the title field of a CSV export. CVE-2019-20184 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2018-20752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitte...

CVE-2025-39245

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data...

CVE-2025-54029

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in extendons WooCommerce csv import export extendons-eo-wooimport-export allows Path Traversal.This issue affects WooCommerce csv import export: from n/a through = 2.0.6...