348 matches found
GHSA-GCMJ-C9GG-9VH6 @joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files
Summary A path traversal vulnerability in the OneNote importer allows overwriting arbitrary files on disk. Details The OneNote converter does not sanitize the names of embedded files before writing them to disk. As a result, it's possible for an attacker to create a malicious .one file that...
PT-2026-41386
Name of the Vulnerable Software and Affected Versions Joplin versions prior to 3.5.7 Description A path traversal issue exists in the OneNote importer. The OneNote converter fails to sanitize the names of embedded files before writing them to disk. An attacker can create a malicious .one file...
Microsoft多款产品 安全漏洞
Microsoft Excel is a product of the American company Microsoft. Microsoft Excel is a spreadsheet processing software within the Office suite. Microsoft Edge is a web browser that comes with systems running Windows 10 and later versions. Microsoft Word is a word processing software within the Offi...
EUVD-2025-2462
Malicious code in bioql PyPI...
EUVD-2023-40712
Malicious code in bioql PyPI...
EUVD-2023-37326
Malicious code in bioql PyPI...
EUVD-2023-25888
Malicious code in bioql PyPI...
EUVD-2022-47625
Malicious code in bioql PyPI...
EUVD-2024-38898
Malicious code in bioql PyPI...
EUVD-2024-19096
Malicious code in bioql PyPI...
EUVD-2025-10117
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-9489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or...
August 5, 2025, update for OneNote 2016 (KB5002761)
None None...
July 1, 2025, update for OneNote 2016 (KB5002714)
None None...
Security Updates for Microsoft OneNote C2R (April 2025)
The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. Th...
CVE-2025-29822
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
Microsoft OneNote Security Feature Bypass Vulnerability (KB5002622)
This host is missing an important security update according to Microsoft KB5002622. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute arbitrary code in the victim's context, potentially gaining access to sensitive data. The vulnerability with reference CVE-2025-29794 in Microsoft SharePoint allows a...
