Lucene search
+L

5317 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/01 6:30 p.m.9 views

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

6.9CVSS5.7AI score0.00449EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/01 6:30 p.m.9 views

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

6.9CVSS5.7AI score0.00449EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/01 6:30 p.m.42 views

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

6.9CVSS0.00449EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 6:30 p.m.45 views

CVE-2026-7589

The CVE concerns ghantakiran splunk-mcp-integration (up to commit 0b86b09d5e5adf0433acd43c975951224613a1a6). Affects the function create_csv_export in services/csv-export-service/app/api/v1/endpoints/csv_export.py (CSV Export). Root cause: manipulation of the job_name argument leads to path trave...

6.9CVSS5.7AI score0.00449EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.13 views

SUSE CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS5.6AI score0.00158EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.22 views

PT-2026-36590

Name of the Vulnerable Software and Affected Versions Royal Elementor Addons versions prior to 1.7.1058 Description The Royal Elementor Addons plugin for WordPress contains a Server-Side Request Forgery SSRF issue. This occurs because the render csv data function does not sufficiently validate...

7.2CVSS5.9AI score0.00379EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.17 views

PT-2026-36533

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function create csv export of the file services/csv-export-service/app/api/v1/endpoints/csv export.py of the component CSV Export. This manipulation of the argument...

6.9CVSS5.5AI score0.00449EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-7111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or...

8.4CVSS7.5AI score0.00158EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/29 3:16 p.m.16 views

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS0.00158EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/04/29 2:22 p.m.17 views

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS5.6AI score0.00158EPSS
SaveExploits0
CVE
CVE
added 2026/04/29 2:22 p.m.84 views

CVE-2026-7111

Text::CSV_XS for Perl prior to 1.62 is affected by a use-after-free when callbacks extend the Perl argument stack. The Parse, print, getline, and getline_all methods cache the stack pointer across calls; if a callback triggers stack reallocation, a stale pointer is used to write a return value, c...

8.4CVSS5.5AI score0.00158EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/04/29 2:22 p.m.13 views

EUVD-2026-26237

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS5.5AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/29 2:22 p.m.6 views

CVE-2026-7111 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS6AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/04/29 2:22 p.m.5 views

CVE-2026-7111 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

5.5AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.9 views

PT-2026-35929

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.62 Description A use-after-free issue exists when registered callbacks extend the Perl argument stack, potentially leading to type confusion or memory corruption. The Parse, print, getline, and getline all...

8.4CVSS5.2AI score0.00158EPSS
SaveExploits0References17
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.15 views

Text-CSV_XS 资源管理错误漏洞

Text-CSVXS is a CSV file parsing and generation tool developed by CPAN authors under open source. Versions of Text-CSVXS prior to 1.62 contained a resource management vulnerability. This vulnerability stemmed from the use of the Perl parameter stack during registration callback extensions; reusin...

8.4CVSS5.8AI score0.00158EPSS
SaveExploits0References1
Fedora
Fedora
added 2026/04/24 12:55 a.m.15 views

[SECURITY] Fedora 43 Update: rpki-client-9.8-1.fc43

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

5.4AI score
SaveExploits0
NVD
NVD
added 2026/04/23 8:16 p.m.11 views

CVE-2026-41264

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSVAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. An attacker can...

9.8CVSS0.01439EPSS
SaveExploits3References1
ATTACKERKB
ATTACKERKB
added 2026/04/23 8:00 p.m.11 views

CVE-2026-41264

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSVAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. An attacker can...

9.8CVSS6AI score0.01439EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2026/04/23 8:00 p.m.39 views

CVE-2026-41264 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSVAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. An attacker can...

9.2CVSS0.01439EPSS
SaveExploits3References1
Rows per page
Query Builder