Lucene search
+L

260 matches found

vulnersOsv
vulnersOsv
•added 2021/07/22 7:48 p.m.•9 views

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3203 more potentially affected by CVE-2021-32013 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32013 Source advisory: OSV:GHSA-8VCR-VXM8-293M...

5.5CVSS6.3AI score0.0088EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/07/22 7:48 p.m.•83 views

Denial of Service in SheetsJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS5.4AI score0.0088EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2021/07/22 7:48 p.m.•90 views

GHSA-8VCR-VXM8-293M Denial of Service in SheetsJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS5.4AI score0.0088EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2021/07/22 7:47 p.m.•5 views

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3203 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: OSV:GHSA-G973-978J-2C3P...

5.5CVSS6.3AI score0.0088EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/07/22 7:47 p.m.•131 views

Denial of Service in SheetJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS4.8AI score0.0088EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2021/07/21 7:32 a.m.•14 views

Denial Of Service (DoS)

xlsx is vulnerable to denial of service. An attacker is able to crash the application via a malicious .xlsx document...

5.5CVSS2.9AI score0.0088EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2021/07/21 7:25 a.m.•27 views

Denial Of Service (DoS)

xlsx is vulnerable to denial of service. An attacker is able to crash the application via a malicious .xlsx document...

5.5CVSS2.9AI score0.0088EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2021/07/21 6:33 a.m.•23 views

Denial Of Service

xlsx of sheetjs is vulnerable to denial of service. The vulnerability exists due to an XLS Xnum Buffer underflow. An attacker is able to crash the system by uploading a malicious crafted xlsx document...

5.5CVSS3.5AI score0.0088EPSS
SaveExploits0References4Affected Software3
Kitploit
Kitploit
•added 2021/07/19 9:30 p.m.•56 views

MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

Crawl SMB shares for juicy information. File content searching + regex is supported! File types supported: PDF DOCX XLSX PPTX any text-based format and many more!! MAN-SPIDER will crawl every share on every target system. If provided creds don't work, it will fall back to "guest", then to a null...

7.2AI score
SaveExploits0References3
OSV
OSV
•added 2021/07/19 2:15 p.m.•18 views

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS7.3AI score0.0088EPSS
SaveExploits0References4
OSV
OSV
•added 2021/07/19 2:15 p.m.•10 views

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS7.3AI score0.0088EPSS
SaveExploits0References4
NVD
NVD
•added 2021/07/19 2:15 p.m.•39 views

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.5CVSS0.0088EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/07/19 2:15 p.m.•9 views

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS6.5AI score0.0088EPSS
SaveExploits0References5
Prion
Prion
•added 2021/07/19 2:15 p.m.•28 views

Design/Logic Flaw

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

4.3CVSS5.5AI score0.0088EPSS
SaveExploits0References4Affected Software3
CVE
CVE
•added 2021/07/19 1:20 p.m.•133 views

CVE-2021-32014

SheetJS Pro up to version 0.16.9 is affected: reading a crafted .xlsx with xlsx.js can cause a denial of service via CPU consumption. The issue is documented across multiple sources (NVD, Red Hat, npm advisory, OSV) and is mitigated by upgrading to 0.17.0 or later. Affected product: SheetJS (and ...

5.5CVSS5.4AI score0.0088EPSS
SaveExploits0References4Affected Software2
CVE
CVE
•added 2021/07/19 1:20 p.m.•128 views

CVE-2021-32013

Affected software: SheetJS and SheetJS Pro up to version 0.16.9. Issue: memory consumption denial of service when reading a crafted .xlsx file via xlsx.js (issue 2 of 2). Impact: DoS due to parsing/memory handling. Remediation: upgrade to SheetJS/xlsx 0.17.0 or higher. Public references in connec...

5.5CVSS5.5AI score0.0088EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
•added 2021/07/19 1:20 p.m.•45 views

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.8AI score0.0088EPSS
SaveExploits0References4
CVE
CVE
•added 2021/07/19 1:20 p.m.•112 views

CVE-2021-32012

CVE-2021-32012 affects SheetJS and SheetJS Pro up to version 0.16.9. A crafted .xlsx document read by xlsx.js can cause a denial of service via memory consumption (issue 1 of 2). Exploitation details are described in the connected documents; the attack targets the XSLX reader logic. Mitigation: u...

5.5CVSS5.4AI score0.0088EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
•added 2021/07/19 1:20 p.m.•41 views

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.8AI score0.0088EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/19 12:00 a.m.•2 views

CVE-2021-32013: Uncontrolled Resource Consumption

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS5.7AI score0.0088EPSS
SaveExploits0References2
Rows per page
Query Builder