Information Disclosure

highcharts-export-server is vulnerable to information disclosure. If the export server is accessible via internet, it allows reading of internal HTTP resources and outputting files served by other services on the internal network in which the export server is hosted...

The name of a filter can be used to XSS users who open an "Export HTML Report" - CVE-2021-26083

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in Export HTML Report feature. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before...

SonicWall SMA100 Authorization Issues Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWALL USA. An authorization issue vulnerability exists in SonicWall SMA100 version 10.2.0.5 and prior versions, which can be exploited by an attacker to export a target profile to a specified email address...

How to Export Your Passwords From LastPass

The popular security service is severely limiting its free tier starting March 16. If you’d like to move your passwords to another manager, here’s how...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

CVE-2021-20018

CVE-2021-20018 affects SonicWall SMA100: a post-authenticated vulnerability that allows exporting the device’s configuration to a specified email address, impacting SMA100 versions 10.2.0.5 and earlier. The CVE details in linked sources (e.g., SonicWall PSIRT SNWLID-2021-0005 and CNVD/CVE records...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

SonicWall SMA100 post-authentication configuration export to the a specified email address

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. CVE: CVE-2021-20018 Last updated: March 13, 2021, 1:19 a.m...

CVE-2021-21085

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

CVE-2021-21085

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

Input validation

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

CVE-2021-21085 Adobe Connect CSV injection via export feature could lead to code execution

Adobe Connect version 11.0.7 and earlier is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine...

CVE-2021-21085

CVE-2021-21085 affects Adobe Connect 11.0.7 and earlier, via an Input Validation vulnerability in the export feature. An attacker can inject a payload into an online event form and achieve code execution if the victim exports and opens the data locally. The issue is documented across multiple sou...

Sonicwall SMA100 授权问题漏洞

The SonicWall SMA100 is a secure access gateway appliance from SonicWALL USA. An authorization issue vulnerability exists in SonicWall SMA100 version 10.2.0.5 and prior versions, which can be exploited by an attacker to export a target profile to a specified email address...

The vulnerability affects the implementation of the OCRAndExportToExcel function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software. This allows an attacker to execute arbitrary code.

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2020-28466

CVE-2020-28466 affects the nats-server component at github.com/nats-io/nats-server/server. The issue arises from an export/import cycle between accounts that untrusted users can trigger, causing the server to crash (denial of service) by consuming CPU/memory. Connected advisories indicate the 2.x...

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

This plugin helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS. wp-admin/admin.php?page=wc-order-export&tab=alert/XSS/...

PT-2021-19200 · Zetetic +1 · Sqlcipher +1

Name of the Vulnerable Software and Affected Versions: Zetetic SQLCipher versions 4.x before 4.4.3 Description: The issue is related to a NULL pointer dereferencing problem in the sqlcipher export function in crypto.c and the sqlite3StrICmp function in sqlite3.c. This may allow an attacker to...