EUVD-2026-23502

Dolibarr: OS Command Injection RCE via MAINODTASPDF configuration...

EUVD-2014-5136

Malware in sbrugna...

EUVD-2018-15631

Malware in sbrugna...

EUVD-2018-15641

Malware in sbrugna...

EUVD-2008-4486

Malware in sbrugna...

SAP Business Intelligence Platform 代码问题漏洞

SAP Business Intelligence Platform is a business intelligence platform from SAP, Germany. SAP Business Intelligence Platform suffers from a code issue vulnerability that originates from an attacker being able to modify the LogonToken IP address of OpenDoc, which could result in different servers...

CVE-2024-28165

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

RHEL 5 : openoffice.org (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption CVE-2015-521...

SAP BusinessObjects Business Intelligence Platform Multiple Vulnerabilities (May 2024)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is potentially affected by the following vulnerabilities: - A cross-site scripting XSS vulnerability exists in the Opendocument URL due to improper validation of user-supplied input before...

CVE-2024-28165

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

CVE-2024-28165

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

CVE-2024-28165 Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

CVE-2024-28165 Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application...

CVE-2024-28165

CVE-2024-28165 affects SAP BusinessObjects Business Intelligence Platform. It is a stored XSS vulnerability where an attacker manipulates the Opendocument URL parameter due to input validation issues, with high impact on confidentiality and integrity. Exploitation would require a user to click a ...

PT-2024-22311 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP Business Objects Business Intelligence Platform affected versions not specified Description: The issue allows an attacker to perform a stored XSS attack by manipulating a parameter in the Opendocument URL, potentially leading to a high...

SUSE CVE-2015-4551

LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from...

UBUNTU-CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

Open-Xchange: XSS on opening malicious OpenOffice presentation document

Title Opening a malicious OpenOffice presentation document may lead to cross site scripting XSS attacks Description When generating HTML content for drawings present in odp file, a div is generated by Drawing.java. The attribute target of this div is directly constructed from the field target...

Description of the PowerPoint Viewer 2010 update: September 10, 2013

Description of the PowerPoint Viewer 2010 update: September 10, 2013 Notice This update is no longer available. To fix the issues that are described in this article, install the latest Microsoft Office update from the following Microsoft Learn article:Latest updates for versions of Office that us...

Description of Office Compatibility Pack Service Pack 2

Describes Office Compatibility Pack Service Pack 2 SP2.INTRODUCTIONMicrosoft Office Compatibility Pack Service Pack 2 SP2 gives customers the latest updates to the Office Compatibility Pack for the Microsoft Office Word 2007 file format, for the Microsoft Office Excel 2007 file format, and for th...