ONLYOFFICE Document Server File Extension Handling Vulnerability (CNVD-2021-17248)

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...

Design/Logic Flaw

A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...

CVE-2021-25830

A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...

CVE-2021-25830

A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...

Dockerhub Document Server 安全漏洞

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...

Qualcomm 组件 输入验证错误漏洞

A Qualcomm component is a component of Qualcomm Incorporated Qualcom. Provides components that are intrinsic to Qualcomm devices. A buffer overflow vulnerability exists in the Qualcomm component that originates from a buffer overflow that occurs when attempting to convert an ASCII string to a...

Ascensio System ONLYOFFICE Document Server 安全漏洞

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...

PT-2021-16806

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions 4.0.0 through 5.6.3 Description A file extension handling issue was found in the core module of ONLYOFFICE DocumentServer. An attacker must request the conversion of a crafted file from PPTT into PPTX format...

PT-2021-16805

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions 4.2.0.236 through 5.6.4.13 Description A file extension handling issue was found in the core module of ONLYOFFICE DocumentServer. An attacker must request the conversion of a crafted file from DOCT into DOCX...

openSUSE Security Update : glibc (openSUSE-2021-358)

This update for glibc fixes the following issues : - Fix buffer overrun in EUC-KR conversion module CVE-2019-25013, bsc1182117, BZ 24973 - x86: Harden printf against non-normal long double values CVE-2020-29573, bsc1179721, BZ 26649 - gconv: Fix assertion failure in ISO-2022-JP-3 module...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5020322681192448 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

[SECURITY] Fedora 33 Update: rygel-0.40.1-1.fc33

Rygel is a home media solution that allows you to easily share audio, video and pictures, and control of media player on your home network. In technical te rms it is both a UPnP AV MediaServer and MediaRenderer implemented through a pl ug-in mechanism. Interoperability with other devices in the...

GHSA-8WP3-CP9V-44FM Cross-Site Scripting in marked

Versions 0.3.7 and earlier of marked unescape only lowercase while owsers support both lowercase and uppercase x in hexadecimal form of HTML character entity...

AutoTrace Input Validation Error Vulnerability

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. An input validation error vulnerability exists in Autotrace version 0.31.1, which arises from a networked system or product that does not properly validate incoming data. No detailed vulnerability details ar...

[SECURITY] Fedora 32 Update: php-horde-Horde-Text-Filter-2.3.7-1.fc32

Common methods for fitering and converting text...

[SECURITY] Fedora 33 Update: php-horde-Horde-Text-Filter-2.3.7-1.fc33

Common methods for fitering and converting text...

CVE-2021-3204

SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server...

CVE-2021-3204

SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server...

PT-2021-19640

Name of the Vulnerable Software and Affected Versions: Webware Webdesktop version 5.1.15 Description: The issue allows an attacker to read all files from the server due to a Server-Side Request Forgery SSRF in the document conversion component. Recommendations: For Webware Webdesktop version...

CVE-2021-3204: Server-Side Request Forgery (SSRF)

SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server...