Event Registration App CSV Injection Vulnerability

Event Registration App is a JavaScript application for registering event participants by Carlo Montero Personal Developer. A CSV injection vulnerability exists in Carlo Montero Event Registration App v1.0, which stems from improper use of the formula elements of the First Name, Contact, and Remar...

Websoft HCM Automation Software XQuery Logic Alteration

The vulnerability of Websoft HCM’s automation software for HR processes is related to deficiencies in the process of eliminating special elements from output data. Exploiting this vulnerability allows a malicious actor to remotely carry out an attack aimed at altering the query logic in the XQuer...

CVE-2022-40752

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687...

Command injection

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687...

CVE-2022-40752: Improper Neutralization of Special Elements used in a Command

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687...

CVE-2022-3895

The CVE-2022-3895 entry describes a cross-site scripting (XSS) vulnerability in the Common UI Component: some UI elements do not properly sanitize output, enabling arbitrary HTML. Affected software is the Common User Interface Component (BlueSpice context implied by related records); root cause i...

GSD-2022-1007451 wifi: cfg80211/mac80211: reject bad MBSSID elements

wifi: cfg80211/mac80211: reject bad MBSSID elements This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.218 by commit...

PT-2022-35587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have...

CVE-2022-38099

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-35276

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38099

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-24200 · Intel · Intel Nuc 11 Compute Element

Name of the Vulnerable Software and Affected Versions: IntelR NUC 11 Compute Elements versions prior to EBTGL357.0065 Description: The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local...

CVE-2022-38099: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-35276: Improper Access Control

Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel NUC input validation error vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR NUC 11 Compute Elements EBTGL357.0065, which stems from the fact that improper input validation of its BIOS firmware could allow a privileged user to escalate privileges v...

CVE-2022-27858: Improper Neutralization of Formula Elements in a CSV File

CSV Injection vulnerability in Activity Log Team Activity Log = 2.8.3 on WordPress...

CVE-2022-3463: Improper Neutralization of Formula Elements in a CSV File

The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection...

CVE-2022-3558: Improper Neutralization of Formula Elements in a CSV File

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files...

DEBIAN-CVE-2022-39353

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the childNodes collection of the Document, without reporting any error or...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...