CVE-2023-6186 Link targets allow arbitrary script execution

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning th...

CVE-2023-6186

CVE-2023-6186 affects LibreOffice. The vulnerability arises from insufficient macro permission validation, enabling certain built-in macros or internal commands to be executed when a user activates hyperlinks that target macros, without explicit user permission. Connected documents corroborate th...

CVE-2023-6186

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning th...

CVE-2023-6186

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning th...

KLA62374 Multiple vulnerabilities in LibreOffice

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Improper input validation vulnerability can be exploited remotely to execute arbitrary code. 2. Remote code execution...

Ubuntu 23.04 / 23.10 : LibreOffice vulnerabilities (USN-6546-1)

The remote Ubuntu 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6546-1 advisory. Reginaldo Silva discovered that LibreOffice incorrectly handled filenames when passing embedded videos to GStreamer. If a user were tricked into...

RHEL 8 : firefox (RHSA-2023:6186)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6186 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6186-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6186-1 advisory. Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leadi...

ABB Telephone Gateway TG/S and Busch-Jaeger Telefon-Gateway Privilege Permission and Access Control Issues Vulnerabilities

The ABB Telephone Gateway TG/S and the Busch-Jaeger 6186/11 Telefon-Gateway are both a telephone gateway product from ABB Switzerland. A privileged license and access control vulnerability exists in the ABB Telephone Gateway TG/S version 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway version, which...

Improper access control

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings...

Design/Logic Flaw

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext although hidden when displayed...

Privilege escalation

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator URL , violating the access-control ACL rules. This issue allows obtaining...

CVE-2019-19105 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext...

CVE-2019-19104

CVE-2019-19104 affects ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway. The web server allows anonymous access to multiple endpoints by requesting a specific URL, violating ACL rules and potentially exposing sensitive data and enabling privilege escalation. The CVSS metric...

CVE-2019-19106: Undefined Security Weakness

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings...

PT-2020-10046

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway affected versions not specified Description The issue concerns unauthorized access to certain application endpoints without proper authentication by accessing a specif...

PT-2020-10048

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway affected versions not specified Description The issue is related to the improper implementation of Access Control, allowing unauthorized users to access restricted dat...

PT-2020-10047

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway affected versions not specified Description The backup function in the affected software saves the current settings and configuration, including credentials of existin...

PT-2020-10049

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway affected versions not specified Description The issue concerns the Configuration pages in the affected software, where user profiles and services transfer passwords in...

CVE-2019-19107: Cleartext Transmission of Sensitive Information

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext although hidden when displayed...