Lucene search
K

10 matches found

Amazon
Amazon
added 2023/09/25 12:0 a.m.2 views

Important: libreoffice

Issue Overview: LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into...

9.8CVSS7.5AI score0.92343EPSS
Exploits12
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.1 views

SUSE CVE-2019-9848

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

4CVSS7.5AI score0.81357EPSS
Exploits5References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.1 views

SUSE CVE-2019-9851

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers...

5.9CVSS7.5AI score0.85077EPSS
Exploits5References8
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.15 views

CVE-2022-3140 Macro URL arbitrary script execution

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal...

7.5AI score0.01322EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/03/31 7:54 p.m.1 views

libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

9.8CVSS6.1AI score0.81357EPSS
Exploits5References5
OSV
OSV
added 2019/08/15 10:15 p.m.1 views

DEBIAN-CVE-2019-9851

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers...

9.8CVSS8.2AI score0.85077EPSS
Exploits5References1
OSV
OSV
added 2019/07/17 12:15 p.m.1 views

DEBIAN-CVE-2019-9848

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

9.8CVSS7.5AI score0.81357EPSS
Exploits5References1
OSV
OSV
added 2019/07/17 12:15 p.m.21 views

CVE-2019-9848

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

9.8CVSS9.7AI score0.81357EPSS
Exploits5References10
OSV
OSV
added 2019/07/16 12:0 a.m.0 views

UBUNTU-CVE-2019-9848

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrar...

9.8CVSS7.2AI score0.81357EPSS
Exploits5References4
RedHat Linux
RedHat Linux
added 2016/12/21 10:0 a.m.0 views

Mozilla: Use-after-free while manipulating DOM events and audio elements (MFSA 2016-94, MFSA 2016-95)

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS7.3AI score0.36421EPSS
Exploits6References5
Rows per page
Query Builder