Lucene search
+L

9639 matches found

CNNVD
CNNVD
added 2023/11/07 12:00 a.m.11 views

WordPress Plugin export-users-data-csv Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.0082EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/07 12:00 a.m.12 views

PT-2023-13999 · Unknown · Export Users Data Csv

Name of the Vulnerable Software and Affected Versions: Export Users Data CSV versions through 2.1 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Export Users Data CSV. Recommendations: For versions through 2.1, update to a...

8.8CVSS7.2AI score0.0082EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/07 12:00 a.m.8 views

WordPress Plugin export-users-data-distinct Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.00802EPSS
SaveExploits0References3
CVE
CVE
added 2023/11/07 12:00 a.m.68 views

CVE-2023-42361

CVE-2023-42361 affects the Midori-global Better PDF Exporter for Jira Server/Data Center (versions 10.3.0 and earlier). The root cause is an insufficient validation pathway in the PDF export flow that can be exploited via a crafted image during export, enabling a Local File Inclusion and potentia...

7.8CVSS7.5AI score0.00928EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/06 12:15 a.m.6 views

CVE-2023-47271

PKP-WAL aka PKP Web Application Library or pkp-lib before 3.3.0-16, as used in Open Journal Systems OJS and other products, does not verify that the file named in an XML document used for the native import/export plugin is an image file, before trying to use it for an issue cover image...

5.3CVSS6AI score0.00618EPSS
SaveExploits2References4
NVD
NVD
added 2023/11/06 12:15 a.m.52 views

CVE-2023-47271

PKP-WAL aka PKP Web Application Library or pkp-lib before 3.3.0-16, as used in Open Journal Systems OJS and other products, does not verify that the file named in an XML document used for the native import/export plugin is an image file, before trying to use it for an issue cover image...

5.3CVSS5.3AI score0.00618EPSS
SaveExploits2References3
Prion
Prion
added 2023/11/06 12:15 a.m.29 views

Design/Logic Flaw

PKP-WAL aka PKP Web Application Library or pkp-lib before 3.3.0-16, as used in Open Journal Systems OJS and other products, does not verify that the file named in an XML document used for the native import/export plugin is an image file, before trying to use it for an issue cover image...

5CVSS7.1AI score0.00618EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/05 12:00 a.m.16 views

PT-2023-30402 · Pkp-Wal · Pkp-Wal

Name of the Vulnerable Software and Affected Versions: PKP-WAL versions prior to 3.3.0-16 PKP-WAL versions prior to 3.4.0-3 Description: The issue arises from the failure to verify that a file named in an XML document, used for the native import/export plugin, is an image file before attempting t...

5.3CVSS5.7AI score0.00618EPSS
SaveExploits2References10
Citrix
Citrix
added 2023/11/03 12:00 a.m.13 views

How to Import OVF Package to XenServer

This article describes how to import OVF package into XenServer. You can use the Citrix® XenServer Conversion Manager to convert hundreds of virtual machines to XenServer. It saves time and storage by converting a virtual machine directly to XenServer unattended.You can also create a virtual...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/11/02 8:21 a.m.18 views

FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength

Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient CWE-1391. Kunal Thakrar and Ceri Coburn of Pen Test...

5.9CVSS6.6AI score0.0035EPSS
SaveExploits0References6
OSV
OSV
added 2023/11/02 3:15 a.m.10 views

CVE-2023-46327

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

5.9CVSS5.8AI score0.0035EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.12 views

PKP Web Application Library Cross-Site Scripting Vulnerability

The PKP Web Application Library is a library shared by PKP's Open Journal System OJS, Open Conference System OCS, Open Monograph Press OMP, Open Preprint System OPS, and Open Harvester System OHS. A cross-site scripting vulnerability exists in the PKP Web Application Library prior to version...

5.4CVSS6.1AI score0.00338EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/11/01 12:00 a.m.20 views

Puppet Enterprise < 2019.8.6 Unsantized Input Vulnerability

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin...

8.8CVSS8.4AI score0.01066EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.21 views

PT-2023-28487 · Chef · Chef Inspec

Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...

8.8CVSS7.7AI score0.00283EPSS
SaveExploits0References7
OSV
OSV
added 2023/10/29 8:15 a.m.7 views

CVE-2021-33637

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/29 8:15 a.m.34 views

CVE-2021-33637

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

8.4CVSS9.2AI score0.00206EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/29 8:15 a.m.24 views

Command injection

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

1.7CVSS6.5AI score0.00206EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/29 7:58 a.m.12 views

CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

8.4CVSS6.8AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/10/29 7:58 a.m.37 views

CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...

8.4CVSS9.4AI score0.00206EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/29 7:58 a.m.65 views

CVE-2021-33637

CVE-2021-33637 describes a vulnerability in iSulad where, when the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. The Red Hat CVD entry mirrors this description. Several open‑source advisories (...

8.4CVSS7.7AI score0.00206EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder