Lucene search
K

31 matches found

Fedora
Fedora
added 2026/04/16 11:42 p.m.3 views

[SECURITY] Fedora 44 Update: plasma-browser-integration-6.6.4-1.fc44

plasma-browser-integration coupled with a browser plugin provides integration of the browser in the desktop. For more information, see https://community.kde.org/Plasma/BrowserIntegration...

5.8AI score
Exploits0
SUSE CVE
SUSE CVE
added 2025/06/24 11:21 p.m.2 views

SUSE CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

2.7CVSS6.9AI score0.00051EPSS
Exploits0References3
OSV
OSV
added 2025/06/23 3:15 p.m.1 views

AZL-64296 CVE-2025-52968 affecting package xdg-utils 1.2.1-3

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

2.7CVSS6AI score0.00051EPSS
Exploits0References1
OSV
OSV
added 2025/06/23 3:15 p.m.0 views

UBUNTU-CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

2.7CVSS6AI score0.00051EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/06/23 12:0 a.m.5 views

CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

2.7CVSS7.3AI score0.00051EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/01 12:0 a.m.5 views

Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2025-006)

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2025-006 advisory. LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An...

7.8CVSS7.9AI score0.00119EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/07 12:0 a.m.6 views

LibreOffice 24.8.x < 24.8.5 / 25.2.x < 25.2.1 (cve-2025-1080)

The version of LibreOffice installed on the remote host is prior to 24.8.5 or 25.2.1. It is, therefore, affected by a vulnerability as referenced in the cve-2025-1080 advisory. - LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An...

7.8CVSS7.9AI score0.00119EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-1080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command'...

7.8CVSS7.8AI score0.00119EPSS
Exploits0References2
OSV
OSV
added 2025/03/04 8:15 p.m.0 views

UBUNTU-CVE-2025-1080

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with...

7.8CVSS7.2AI score0.00119EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/03/04 8:4 p.m.11 views

CVE-2025-1080 Macro URL arbitrary script execution

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with...

7.2CVSS0.00119EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/04 8:4 p.m.8 views

CVE-2025-1080 Macro URL arbitrary script execution

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with...

7.2CVSS6.7AI score0.00119EPSS
Exploits0References1
CVE
CVE
added 2025/03/04 8:4 p.m.1619 views

CVE-2025-1080

CVE-2025-1080 affects LibreOffice and concerns the handling of Office URI Schemes, including the LibreOffice-specific scheme “vnd.libreoffice.command.” The vulnerability arises from an embedded inner URL in a browser-constructed link that, when passed to LibreOffice, could cause internal macros t...

7.8CVSS6.5AI score0.00119EPSS
Exploits0References2Affected Software1
FreeBSD
FreeBSD
added 2025/03/04 12:0 a.m.10 views

libreoffice -- Macro URL arbitrary script execution

[email protected] reports: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser...

7.8CVSS7.3AI score0.00119EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/02/26 12:0 a.m.8 views

Fedora: Security Advisory for plasma-browser-integration (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2023/02/25 3:47 a.m.8 views

[SECURITY] Fedora 37 Update: plasma-browser-integration-5.27.1-1.fc37

plasma-browser-integration coupled with a browser plugin provides integration of the browser in the desktop. For more information, see https://community.kde.org/Plasma/BrowserIntegration...

7.3AI score
Exploits0
Mageia
Mageia
added 2022/10/28 11:32 p.m.42 views

Updated libreoffice packages fix security vulnerability

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal...

6.3CVSS1.8AI score0.01322EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2022/10/14 5:29 a.m.104 views

CVE-2022-3140

A vulnerability was found in LibreOffice that affects the Office URI Schemes. These schemes enable browser integration of LibreOffice with the MS SharePoint server. In LibreOffice, the links using the scheme 'vnd.libreoffice.command' could be constructed to call internal macros with arbitrary...

5.3CVSS2.2AI score0.01322EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/10/13 12:0 a.m.28 views

Debian DSA-5252-1 : libreoffice - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5252 advisory. - LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific t...

6.3CVSS6.6AI score0.01322EPSS
Exploits0References5
OSV
OSV
added 2022/10/11 9:15 p.m.3 views

CVE-2022-3140

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal...

6.3CVSS7.2AI score0.01322EPSS
Exploits0References5
Fedora
Fedora
added 2021/03/20 12:20 a.m.19 views

[SECURITY] Fedora 34 Update: plasma-browser-integration-5.21.3-1.fc34

plasma-browser-integration coupled with a browser plugin provides integrati on of the browser in the desktop. For more information, see https://community.kde.org/Plasma/BrowserIntegration...

7.5CVSS0.7AI score0.00701EPSS
Exploits0
Rows per page
Query Builder