Lucene search
+L

5930 matches found

CNNVD
CNNVD
added 2025/01/16 12:00 a.m.8 views

WordPress plugin Word Freshener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... WordPress plugin...

7.1CVSS8.2AI score0.00191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.8 views

PT-2025-4949 · Unknown · Sourov Amin Word Freshener

Name of the Vulnerable Software and Affected Versions: Sourov Amin Word Freshener versions 1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a w...

7.1CVSS9.1AI score0.00191EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/01/15 12:00 a.m.16 views

Microsoft Office Word DOCX File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.7AI score0.00755EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/01/15 12:00 a.m.12 views

Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.9AI score0.80912EPSS
SaveExploits6References1
OSV
OSV
added 2025/01/14 6:16 p.m.5 views

CVE-2025-21363

Microsoft Word Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.00755EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/14 6:16 p.m.13 views

CVE-2025-21363

Microsoft Word Remote Code Execution Vulnerability...

7.8CVSS0.00755EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/14 6:04 p.m.102 views

CVE-2025-21363

CVE-2025-21363 is a Microsoft Word remote code execution vulnerability with a high base score (7.8). The data confirms affected product is Microsoft Word/Office and that exploitation would require user interaction, with a local attack vector. Root cause details are not provided in the supplied do...

7.8CVSS7.8AI score0.00755EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/01/14 6:04 p.m.32 views

CVE-2025-21363 Microsoft Word Remote Code Execution Vulnerability

...

7.8CVSS0.00755EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 6:04 p.m.27 views

CVE-2025-21363 Microsoft Word Remote Code Execution Vulnerability

...

7.8CVSS7.8AI score0.00755EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/01/14 8:00 a.m.16 views

Microsoft Word Remote Code Execution Vulnerability

...

7.8CVSS7.1AI score0.00755EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/01/14 12:00 a.m.17 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS7.9AI score0.00755EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/01/07 12:00 a.m.17 views

Security Updates for Microsoft Word Products C2R (November 2024)

The Microsoft Word Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

7.5CVSS5.4AI score0.02101EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/02 12:15 p.m.10 views

CVE-2023-46628

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4...

4.3CVSS7.3AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.16 views

CVE-2023-46628

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4...

4.3CVSS0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.9 views

WordPress plugin WP Word Count 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/18 11:15 p.m.8 views

CVE-2024-41165

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of th...

9.1CVSS5.8AI score0.00736EPSS
SaveExploits1References2
NVD
NVD
added 2024/12/18 11:15 p.m.42 views

CVE-2024-41165

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of th...

9.1CVSS0.00736EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/12/18 10:39 p.m.52 views

CVE-2024-41165

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of th...

7.1CVSS0.00736EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/12/18 10:39 p.m.21 views

CVE-2024-41165

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of th...

7.1CVSS6.9AI score0.00736EPSS
SaveExploits1References1
CVE
CVE
added 2024/12/18 10:39 p.m.127 views

CVE-2024-41165

CVE-2024-41165 affects Microsoft Word 16.83 for macOS. Talos reports a library-injection vulnerability where a malicious library loaded via relative paths and the app’s hardened runtime with com.apple.security.cs.disable-library-validation enabled could be used to bypass permissions and reuse Wor...

9.1CVSS6.9AI score0.00736EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder