8474 matches found
XXE in PHPSpreadsheet's XLSX reader
Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through the toUtf8 function in the XmlScanner.php file. An attacker can disclose server files and sensitive information by providing an Excel sheet with a modified XML structure, specifying UTF-7 encodi...
GHSA-6HWR-6V2F-3M88 XXE in PHPSpreadsheet's XLSX reader
Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...
Absolute Path Traversal
Overview Affected versions of this package are vulnerable to Absolute Path Traversal via the setPath method. An attacker can access or leak sensitive information by constructing a malicious XLSX file that manipulates the path to external or internal resources, exploiting the file reading mechanis...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to the use of memory after it is freed, allows attackers to escalate their privileges.
The vulnerability of Microsoft Excel editors is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the IOFactory::load function. An attacker can read local files or potentially execute arbitrary code by uploading a malicious XLSX template that contains a specially crafted XML payload. This is onl...
The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS, related to errors in verifying cryptographic signatures, allows attackers to escalate their privileges.
The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Excel Elevation of Privilege Vulnerability (CNVD-2024-42948)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code with elevated privileges...
Microsoft Office Elevation of Privilege Vulnerability (Sep 2024) - Mac OS X
This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update September 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...
Microsoft Excel 2016 Elevation of Privilege Vulnerability (KB5002605)
This host is missing an important security update according to Microsoft KB5002605 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2024-43465
Microsoft Excel Elevation of Privilege Vulnerability...
CVE-2024-43465
Microsoft Excel Elevation of Privilege Vulnerability...
CVE-2024-43465 Microsoft Excel Elevation of Privilege Vulnerability
...
CVE-2024-43465 Microsoft Excel Elevation of Privilege Vulnerability
...
CVE-2024-43465
CVE-2024-43465 is an Elevation of Privilege vulnerability affecting Microsoft Excel components in Office products. The connected documents indicate the issue is addressed by official security updates (e.g., KB5002601 for Office Online Server and KB5002605 for Excel 2016) released September 10, 20...
KB5046060 - Description of the security update for SQL Server 2019 CU28: October 8, 2024
None None...
KB5042578 - Description of the security update for SQL Server 2022 CU14: September 10, 2024
None None...
KB5042217 - Description of the security update for SQL Server 2017 GDR: September 10, 2024
None None...