Lucene search
+L

400 matches found

CNVD
CNVD
•added 2025/11/20 12:00 a.m.•24 views

Apache OpenOffice Information Disclosure Vulnerability

Apache OpenOffice is an open source office software suite from the U.S. Apache Apache Foundation. The suite contains text documents , spreadsheets , presentations , drawings , databases and so on. An information disclosure vulnerability exists in Apache OpenOffice, which is caused due to a lack o...

5.3CVSS5.8AI score0.00491EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•37 views

Apache OpenOffice Out-of-Bounds Write Vulnerability

Apache OpenOffice is an open source office software suite from the American Apache Apache Foundation. Apache OpenOffice suffers from an out-of-bounds write vulnerability that originates from out-of-bounds writes to memory buffers, which can be exploited by a remote attacker to crash the program...

4.3CVSS7.3AI score0.00546EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•33 views

Apache OpenOffice External File Loading Vulnerability

Apache OpenOffice is an open source office software suite from the American Apache Apache Foundation. A security vulnerability exists in Apache OpenOffice, which stems from improper authorization checking, and can be exploited by remote attackers to automatically load external files containing DD...

7.5CVSS7.4AI score0.01446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 10:02 a.m.•17 views

CVE-2025-64405

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to...

7.5CVSS7.2AI score0.01446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 9:08 a.m.•15 views

CVE-2025-64402

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to...

6.5CVSS6.4AI score0.00587EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/12 12:30 p.m.•20 views

EUVD-2025-124979

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

6.7CVSS5.9AI score0.00549EPSS
SaveExploits1References3
NVD
NVD
•added 2025/11/12 10:15 a.m.•27 views

CVE-2025-64407

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

5.3CVSS0.00491EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/12 9:15 a.m.•26 views

CVE-2025-64403

Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links to be loaded without prompt. This issue affects Apache...

8.1CVSS7.5AI score0.01259EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/11/12 9:15 a.m.•20 views

CVE-2025-64405

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to...

7.5CVSS7.1AI score0.01446EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/12 9:15 a.m.•28 views

CVE-2025-64401

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linke...

7.5CVSS0.00895EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 9:12 a.m.•6 views

CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

5.7AI score0.00491EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/12 9:12 a.m.•45 views

CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

0.00491EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 9:11 a.m.•8 views

CVE-2025-64406 Apache OpenOffice: Possible memory corruption during CSV import

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the...

7.2AI score0.00546EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 9:10 a.m.•11 views

CVE-2025-64405 Apache OpenOffice: Remote documents loaded without prompt via DDE function

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to...

7.2AI score0.01446EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/12 9:08 a.m.•52 views

CVE-2025-64404

CVE-2025-64404 affects Apache OpenOffice up to version 4.1.15. The issue is a missing Authorization vulnerability that allows an attacker to craft a document containing links (specifically background fill or bullet images) that would cause external files to be loaded without prompting the user. A...

7.5CVSS7.2AI score0.01252EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2025/11/12 8:58 a.m.•51 views

CVE-2025-64401

A missing Authorization vulnerability in Apache OpenOffice (versions through 4.1.15) allows an attacker to craft a document that causes external links to load without user prompting. Specifically, documents utilizing "floating frames" linked to external files will load the contents of those frame...

7.5CVSS7.2AI score0.00895EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•18 views

Apache OpenOffice security vulnerabilities

Apache OpenOffice is an open source office software suite from the American Apache Apache Foundation. A security vulnerability exists in Apache OpenOffice, which stems from improper authorization checking, and can be exploited by remote attackers to automatically load external files containing DD...

7.5CVSS7.4AI score0.01446EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•4 views

CVE-2025-64402: Missing Authorization

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to...

6.5CVSS6.4AI score0.00587EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•20 views

Apache OpenOffice security vulnerabilities

Apache OpenOffice is an open source office software suite from the U.S. Apache Apache Foundation. The suite contains text documents , spreadsheets , presentations , drawings , databases and so on. An information disclosure vulnerability exists in Apache OpenOffice, which is caused due to a lack o...

5.3CVSS5.8AI score0.00491EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•24 views

Apache OpenOffice security vulnerabilities

Apache OpenOffice is an open source office software suite from the Apache USA Foundation. The suite contains text documents, spreadsheets, presentations, drawings, databases and more. A security vulnerability exists in Apache OpenOffice versions 4.1.15 and earlier, which stems from a lack of...

8.1CVSS7.5AI score0.01259EPSS
SaveExploits0References4
Rows per page
Query Builder