8472 matches found
CVE-2020-10780
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affect...
Input validation
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affect...
CVE-2020-10780
CVE-2020-10780 affects Red Hat CloudForms 4.7 and 5, where a CSV Injection flaw in Orchestration Templates can be triggered when a crafted CSV is exported and opened in Excel. The underlying issue is loosely validated parameters allowing CSV formulae to execute after the file is opened, enabling ...
CVE-2020-10780
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once the victim opens the file, the formula executes, triggering any number of possible events. While this is strictly not an flaw that affect...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Description of the security update for SharePoint Server 2010: August 11, 2020
Description of the security update for SharePoint Server 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, se...
Description of the security update for Excel 2016: August 11, 2020
None None...
Description of the security update for Excel 2013: August 11, 2020
Description of the security update for Excel 2013: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securit...
Microsoft Excel Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
PT-2020-3814 · Microsoft · Office Online Server +3
Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Office Online Server versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft SharePoint Server versions affected versions...
PT-2020-3816 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software due to its failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in the...
PT-2020-3796 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...
Security Updates for Microsoft Excel Products (August 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
PT-2020-3795 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...
PT-2020-3815 · Microsoft · Office +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by Microsoft Excel. This could allow an attacke...