Lucene search
+L

10049 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•2 views

CVE-2025-30376: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.7AI score0.00612EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•3 views

CVE-2025-32704: Buffer Over-read

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

8.4CVSS7.8AI score0.0045EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•1 views

CVE-2025-30393: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00461EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•2 views

CVE-2025-30383: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.0057EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•1 views

CVE-2025-30381: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.0057EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•2 views

CVE-2025-30375: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.00612EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•2 views

CVE-2025-29979: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.7AI score0.00663EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•3 views

CVE-2025-29977: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00649EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/05/13 12:00 a.m.•20 views

Security Updates for Microsoft Excel Products (May 2025)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

7.8CVSS8.5AI score0.00663EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/04/25 6:09 p.m.•20 views

CVE-2025-32674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit f...

7.1CVSS7.2AI score0.00293EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/04/20 11:24 p.m.•16 views

SUSE CVE-2017-8744

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle objects in memory, aka...

9.3CVSS7.4AI score0.17888EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2025/04/17 6:31 p.m.•3 views

free-mcp-excel (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-53924 via pycel (1.0.0b30)

pycel PYPI version 1.0.0b30 is affected by a known vulnerability. The following packages have a transitive dependency on pycel and may be impacted: - free-mcp-excel =0.1.2, =0.1.3 Source cves: CVE-2024-53924 Source advisory: OSV:GHSA-PW67-XJHQ-389W...

9.8CVSS0.00991EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2025/04/17 6:15 p.m.•3 views

free-mcp-excel (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-53924 via pycel (1.0.0b30)

pycel PYPI version 1.0.0b30 is affected by a known vulnerability. The following packages have a transitive dependency on pycel and may be impacted: - free-mcp-excel =0.1.2, =0.1.3 Source cves: CVE-2024-53924 Source advisory: OSV:PYSEC-2025-177...

9.8CVSS0.00991EPSS
SaveExploits2
NVD
NVD
•added 2025/04/17 4:15 p.m.•19 views

CVE-2025-32674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit f...

7.1CVSS0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:46 p.m.•34 views

CVE-2025-32674 WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit f...

7.1CVSS0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•22 views

WordPress plugin Product Excel Import Export & Bulk Edit for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.9AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•33 views

PT-2025-17167 · WordPress · Wpfactory Product Excel Import Export & Bulk Edit For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPFactory Product Excel Import Export & Bulk Edit for WooCommerce versions n/a through 4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows...

7.1CVSS7.1AI score0.00293EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•8 views

CVE-2025-32674: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit f...

7.1CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/04/11 12:00 a.m.•58 views

Security Updates for Microsoft Excel Products C2R (April 2025)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-26642, CVE-2025-27750,...

7.8CVSS8.9AI score0.02484EPSS
SaveExploits4References6
RedhatCVE
RedhatCVE
•added 2025/04/10 6:43 p.m.•16 views

CVE-2025-29823

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.6AI score0.00687EPSS
SaveExploits0References3
Rows per page
Query Builder