CVE mentions, exploit signals, and PoC evidence in one fast public view.
CWE archive
3 CVEs tagged with CWE-148 — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the user loading the…
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of…