R7-Officer document editor Code Execution

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

CVE-2026-18390

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-12613

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

CVE-2026-12613

The Ministry of Justice General Directorate of Information Technology UYAP Document Editor is affected by a deserialization of untrusted data vulnerability (CWE-502). This flaw allows for Object Injection , which can lead to significant impact on the system. The vulnerability specifically impacts...

CVE-2026-12613 Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

CVE-2026-12613 Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

EUVD-2026-97430

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This issue affects UYAP Document Editor: before 5.4.20...

CVE-2026-18390

The UYAP Document Editor (Ministry of Justice General Directorate of Information Technology) is vulnerable to an OS command injection flaw in versions before 5.4.20 . The vulnerability stems from the improper neutralization of special elements used in an OS command, potentially allowing an attack...

CVE-2026-18390 Command Injection in Ministry of Justice's UYAP Document Editor

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-18390 Command Injection in Ministry of Justice's UYAP Document Editor

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

EUVD-2026-97437

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows OS Command Injection. This issue affects UYAP Document Editor: before 5.4.20...

CVE-2026-18390: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-12613: Deserialization of Untrusted Data

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

PT-2026-110600

Name of the Vulnerable Software and Affected Versions UYAP Document Editor versions prior to 5.4.21 Description Improper neutralization of special elements used in an OS command leads to an OS command injection flaw in the Ministry of Justice General Directorate of Information Technology UYAP...

PT-2026-110599

Name of the Vulnerable Software and Affected Versions UYAP Document Editor versions prior to 5.4.21 Description Deserialization of untrusted data in the Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This occurs when the application...

[SECURITY] Fedora 43 Update: lyx-2.5.2-1.fc43

LyX is a modern approach to writing documents which breaks with the obsolete "typewriter paradigm" of most other document preparation systems. It is designed for people who want professional quality output with a minimum of time and effort, without becoming specialists in typesetting. The major...

CVE-2026-16999

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...

EUVD-2026-57212

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...

CVE-2026-16999

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...

CVE-2026-16999 XXE in Ministry of Justice's UYAP Document Editor

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...