LibreOffice Information Disclosure Vulnerability

LibreOffice is an open source office software suite. The suite includes software for text documents, spreadsheets, presentations, drawings, databases, and more, and is developed by The Document Foundation The Document Foundation, TDF. A security vulnerability exists in LibreOffice Calc and Writer...

Debian DSA-3792-1 : libreoffice - security update

Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157 /for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

USN-3210-1: LibreOffice vulnerability

Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer disclose arbitrary files to an attacker if a user opened a specially crafted file with embedded links...

PT-2017-4205 · Gd +3 · Gd Graphics Library +3

Name of the Vulnerable Software and Affected Versions: GD Graphics Library versions through 2.2.5 Description: The issue is related to a heap-based buffer over-read in the tiffWriter function in gd tiff.c. This can allow a remote attacker to access confidential data and cause a denial of service...

No Transaction Logs Truncated After Backup of Exchange DAG Passive Node

Article Applicability This article documents a niche issue caused by changes being made to the Exchange configuration. Challenge This article is specific to a scenario where all of the following are true: Microsoft Exchange transaction logs are not truncated after the backup completes. The...

Wordpress recipes-writer plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. recipes-writer is one of the plug-ins used to write a standardized blog. A cross-site scripting vulnerability...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

CVE-2016-1000147 affects the WordPress plugin recipes-writer up to version 1.0.4, with a Reflected XSS vulnerability in the plugin. The issue is documented across multiple sources (NVD entry states Reflected XSS in recipes-writer v1.0.4; patches/advisories from Patchstack and WPVulndb reiterate X...

DEBIAN-CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

Integer overflow

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

CVE-2016-6250

Summary: CVE-2016-6250 affects libarchive’s ISO9660 writer and causes an integer overflow when verifying filename lengths during ISO9660 archive creation, potentially triggering a buffer overflow that can crash the application or allow code execution. Public disclosures and multiple vendor adviso...

CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow...

Apache OpenOffice -- multiple vulnerabilities

The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...

Recipes Writer <= 1.0.4 - XSS

Plugin is still affected and has been closed...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability caused by the lack of validation of format values in the ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scopedclipboardwriter.cc. Exploiting this vulnerability allows malicious actors to cause service failures or otherwise affe...

The vulnerability of the PHP interpreter allows attackers to read arbitrary files or write to them.

The vulnerability of the PHP interpreter lies in the lack of checks for the sequence “%00” in the path name. Exploiting this vulnerability allows an attacker to read arbitrary files or write to them using specially crafted input data for an application that calls the method DOMDocument.load, the...

Monospace Writer - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Monospace Writer published at the 'play' market has multiple vulnerabilities...