8446 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-2897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption...
PT-2025-34444 · Microsoft +1 · Office Excel +1
Name of the Vulnerable Software and Affected Versions: UnoPim versions prior to 0.3.1 Description: UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Versions 0.3.0 and prior are susceptible to CSV injection, also known as formula injection, in the...
📄 nopCommerce 4.10 / 4.80.3 Resource Exhaustion
nopCommerce versions 4.10 and 4.80.3 are vulnerable to resource exhaustion vulnerabilities. nopCommerce is vulnerable to Insufficient Resource Allocation Limits when handling large Excel file imports. Although the application provides a warning message recommending that users avoid importing more...
📄 nopCommerce 4.10 / 4.80.3 CSV Injection
nopCommerce versions 4.10 and 4.80.3 are vulnerable to CSV injection Formula Injection when exporting data to CSV. The application does not properly sanitize user-supplied input before including it in CSV export files. nopCommerce versions v4.10 and v4.80.3 are vulnerable to CSV Injection Formula...
Linux Distros Unpatched Vulnerability : CVE-2017-12109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS fi...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18821)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18822)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18820)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...
Security Updates for Microsoft Excel Products C2R (August 2025)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instea...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18823)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused by free use when opening specially crafted files. An attacker can exploit the vulnerability to execute arbitrary code on the syste...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18819)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to an error when opening a specially crafted file. An attacker could exploit this vulnerability to execute arbitrary code on t...
Linux Distros Unpatched Vulnerability : CVE-2023-4581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their...
MAL-2025-39873 Malicious code in xlsx-to-json-lh (npm)
The package xlsx-to-json-lh was found to contain malicious code...
MAL-2025-35302 Malicious code in test-mlw2-excel-cutin (npm)
The package test-mlw2-excel-cutin was found to contain malicious code...
Malicious code in excel-data-exporter (npm)
The package excel-data-exporter was found to contain malicious code...
Malicious code in test-mlw2-excel-cutin (npm)
The package test-mlw2-excel-cutin was found to contain malicious code...
MAL-2025-20036 Malicious code in excel-data-exporter (npm)
The package excel-data-exporter was found to contain malicious code...
CVE-2025-53759
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...