CVE-2022-33043

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

Cross site scripting

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

CVE-2022-33043

A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...

Beijing Lier Hexun Technology Urtracker Premium 跨站脚本漏洞

Beijing Lier Hexun Technology Urtracker Premium is a general-purpose Issue Tracking software from Beijing Lier Hexun Technology. It is designed to help organizations and teams establish various types of issue handling processes, manage all issues and track and record the handling of these issues,...

Formula Injection in Exported Data

Impact Datasets exported to file e.g. CSV / XLS are not sufficiently sanitized, to neutralize potential formula injection Patches - The issue is addressed in the upcoming 0.8.0 release - This fix will also be back-ported to the 0.7.x branch, applied to the 0.7.2 release Workarounds Users exportin...

The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages lies in the lack of proper validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-30173

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-30173

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-30173

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-30173

CVE-2022-30173 is identified as a Microsoft Excel Remote Code Execution vulnerability. Connected sources confirm an Excel-related RCE in Office/Excel 2016 and reference security update KB5002208 as the remediation path. The documents do not disclose the exact root cause, vulnerable component/vers...

CVE-2022-30173 Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002208)

This host is missing a critical security update according to Microsoft KB5002208 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerability (KB5002220)

This host is missing an important security update according to Microsoft KB5002220 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

SSRF via Import URL

Description While importing CSV and Excel file via an URL, the server does not validate requests properly that's how the attacker can able to make requests to internal servers and access the contents. Proof of Concept 1. Go to any project 2. From Dashboard, click on Add / Import CSV or Microsoft...

Description of the security update for Office Web Apps Server 2013: June 14, 2022 (KB5002214)

None None...

Description of the security update for Excel 2016: June 14, 2022 (KB5002208)

None None...

Microsoft Excel Remote Code Execution Vulnerability

...

Description of the security update for Excel 2013: June 14, 2022 (KB5002220)

Description of the security update for Excel 2013: June 14, 2022 KB5002220 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-30173. Note: To apply this...

PT-2022-3305 · Microsoft · Office Web Apps Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office Web Apps Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel and Microsoft Office Web Apps Server, which...