Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/12/11 12:3 a.m.5 views

CVE-2025-65814

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal...

6.5CVSS7AI score0.00484EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/10 12:0 a.m.1 views

CVE-2025-65814

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal...

6.7AI score0.00484EPSS
Exploits1References2
EUVD
EUVD
added 2025/12/10 12:0 a.m.3 views

EUVD-2025-202432

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal...

6.5CVSS6.5AI score0.00484EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-30325

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00131EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/09/21 4:25 p.m.6 views

CVE-2025-10718

A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made...

5.3CVSS6.2AI score0.00131EPSS
Exploits0References1
CVE
CVE
added 2025/09/19 4:2 p.m.11 views

CVE-2025-10718

CVE-2025-10718 affects the Ooma Office Business Phone App for Android up to version 7.2.2, specifically the com.ooma.office2 component. The root cause is improper export of Android application components, enabling local exploitation. The vulnerability has publicly available exploit details and ca...

5.3CVSS5.9AI score0.00131EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/09/19 4:2 p.m.2 views

CVE-2025-10718 Ooma Office Business Phone App com.ooma.office2 improper export of android application components

A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made...

5.3CVSS5.1AI score0.00131EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/19 12:0 a.m.4 views

PT-2025-38581

Name of the Vulnerable Software and Affected Versions Ooma Office Business Phone App versions up to 7.2.2 Description A vulnerability exists in the com.ooma.office2 component of the Ooma Office Business Phone App on Android. The issue involves improper export of Android application components,...

5.3CVSS4.8AI score0.00131EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/09/19 12:0 a.m.2 views

Ooma Office Business Phone App 安全漏洞

Ooma Office Business Phone App is a cloud-based morning phone system from Ooma USA. A security vulnerability exists in Ooma Office Business Phone App version 7.2.2 and prior versions, which stems from improper export of android application components and could lead to a local attack...

5.3CVSS5.3AI score0.00131EPSS
Exploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/15 11:53 p.m.3 views

Malicious code in angieslist-office-app-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef02b48854bea0c3c7e012377ff6e37a2ca9b371c56552ac87a3ec84a8ec098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:0 a.m.3 views

CVE-2023-28645

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich documents app can be bypassed by using unprotected internal API endpoint of the rich documents app. It is recommended that the Nextcloud Office app...

6.5CVSS6.7AI score0.00745EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.2 views

Rising Technosoft CAP back office application 安全漏洞

Rising Technosoft CAP back office application is a back office application from Rising Technosoft India. A security vulnerability exists in Rising Technosoft CAP back office application, which stems from a lack of OTP request rate limiting on the API endpoint, which could lead to OTP bombing or...

8.2CVSS6.7AI score0.00356EPSS
Exploits0References1
Trend Micro Simply Security
Trend Micro Simply Security
added 2023/07/14 12:0 a.m.7 views

Possible Supply-Chain Attack Targeting Pakistani Government Delivers Shadowpad

We recently found that a modified installer of the E-Office app used by the Pakistani government delivered a Shadowpad sample, suggesting a possible supply-chain attack...

7AI score
Exploits0
OSV
OSV
added 2023/02/08 7:15 p.m.35 views

CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

5.8CVSS5.5AI score0.00735EPSS
Exploits0References5
Nextcloud
Nextcloud
added 2023/02/08 2:35 p.m.63 views

Document content of files can be obtained through Collabora for files of other users

None...

5.8CVSS5.7AI score0.00735EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/12/15 2:15 p.m.4 views

CVE-2021-43905 Microsoft Office app Remote Code Execution Vulnerability

...

9.6CVSS7.5AI score0.02821EPSS
Exploits0References1
Rows per page
Query Builder