Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation

The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...

Microsoft Excel Code Execution Vulnerability (CNVD-2023-80162)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Office Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB5002434)

This host is missing an important security update according to Microsoft KB5002434 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Updates for Microsoft Excel Products C2R (July 2023)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - Two remote code execution vulnerabilities. CVE-2023-33161, CVE-2023-33158 - An information disclosure vulnerability. CVE-2023-33162 Note that Nessus has not tested for...

WordPress Plugin WP EasyPay – Square for WordPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP EasyPay...

Microsoft Office 2019 Multiple Vulnerabilities (Jul 2023) - Mac OS X

This host is missing an important security update for Microsoft Office 2019 on Mac OS X according to Microsoft security update July 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Excel 2016 Security Feature Bypass Vulnerability (KB5002426)

This host is missing a critical security update according to Microsoft KB5002426 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2023)

This host is missing a critical security update according to Microsoft Office Click-to-Run update July 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2023-12523 · WordPress · Wp Easypay – Square

Name of the Vulnerable Software and Affected Versions: WP EasyPay – Square for WordPress plugin versions up to, and including, 3.2.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the wpep download transaction in excel function. Thi...

CVE-2023-33162

Microsoft Excel Information Disclosure Vulnerability...

CVE-2023-33162

Microsoft Excel Information Disclosure Vulnerability...

CVE-2023-33161

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33161

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33158

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33158

Microsoft Excel Remote Code Execution Vulnerability...

Information disclosure

Microsoft Excel Information Disclosure Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33162 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2023-33162

CVE-2023-33162 is an information disclosure vulnerability in Microsoft Excel. Connected sources confirm a fix via the Office Online Server July 2023 security update KB5002421 (build 16.0.10400.20000) and related Excel updates (e.g., KB5002426 for Excel 2016). The CVE entry notes a local, informat...