CVE-2021-26082

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

Export report email from Veeam Explorer for Microsoft Exchange is sent in an unexpected language

Challenge Export reports sent by Veeam Explorer for Microsoft Exchange are illegible or unexpectedly contain Chinese characters. Cause The issue is caused by an encoding conflict. By default, Veeam Explorer for Microsoft Exchange uses UTF-16 character encoding, and the issue appears under followi...

CVE-2021-32747

Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...

CVE-2021-24441

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

CVE-2021-24441

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

CVE-2021-24441 Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

CVE-2021-24441: Improper Neutralization of Formula Elements in a CSV File

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue...

CVE-2021-32747: Exposure of Sensitive Information to an Unauthorized Actor

Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga...

PT-2021-6529

Name of the Vulnerable Software and Affected Versions Icinga Web 2 versions 2.0.0 through 2.8.2 Description A vulnerability exists in Icinga Web 2 where custom variables are exposed to unauthorized users. Custom variables are user-defined keys and values on configuration objects in Icinga 2,...

CVE-2021-30117

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.1.194 User-Agent: Mozilla/5.0 Macintosh;...

Unspecified vulnerability in myFax

myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

Information disclosure

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

CVE-2020-24038 affects myFax version 229, where the export log module logs sensitive information, enabling access to critical data by any user. The Red Hat, CNVD, CNNVD and related records corroborate an information disclosure flaw rooted in the export logging, resulting in exposure of sensitive ...

CVE-2020-24038: Insertion of Sensitive Information into Log File

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

PT-2021-11002

Name of the Vulnerable Software and Affected Versions: myFax version 229 Description: The issue concerns the logging of sensitive information in the export log module, allowing any user to access critical information. Recommendations: For myFax version 229, consider restricting access to the expo...

MyFax log information leakage vulnerability

myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...

CVE-2021-24451

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...