8474 matches found
CVE-2021-38147
Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...
[SECURITY] Fedora 35 Update: libxls-1.6.2-5.fc35
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
[SECURITY] Fedora 34 Update: libxls-1.6.2-5.fc34
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
[SECURITY] Fedora 33 Update: libxls-1.6.2-5.fc33
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
Wipro Holmes Orchestrator Access Control Error Vulnerability
Wipro Holmes Orchestrator, a one-stop application artificial intelligence Ai and automation platform orchestrator from Wipro India, is vulnerable to an access control error in Wipro Holmes Orchestrator version 20.4.1, which could be exploited by an unauthenticated attacker to download previously...
CVE-2021-44147
An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...
Wipro Holmes Orchestrator 20.4.1 Report Disclosure Vulnerability
Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Excel Report Download Exploit Author: Rizal Muhammed @ub3rsick Vendor Homepage: https://www.wipro.com/holmes/ Version: 20.4.1 Tested on: Windows 10 x64 CVE : CVE-2021-38147 In the Wipro Holmes Orchestrator 20.4.1 application, if at...
Wipro Holmes Orchestrator 20.4.1 Report Disclosure
Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Excel Report Download Date: 09/08/2021 Exploit Author: Rizal Muhammed @ub3rsick Vendor Homepage: https://www.wipro.com/holmes/ Version: 20.4.1 Tested on: Windows 10 x64 CVE : CVE-2021-38147 In the Wipro Holmes Orchestrator 20.4.1...
Wipro Holmes Orchestrator 访问控制错误漏洞
Wipro Holmes Orchestrator, a one-stop application artificial intelligence Ai and automation platform orchestrator from Wipro India, is vulnerable to an access control error in Wipro Holmes Orchestrator version 20.4.1, which could be exploited by an unauthenticated attacker to download previously...
November 22, 2021—KB5007253 (OS Builds 19041.1387, 19042.1387, 19043.1387, and 19044.1387) Preview
None None...
Security Updates for Microsoft Office (November 2021) (macOS)
The Microsoft Office product installed on the remote host is affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability in Excel that can be exploited by an unauthenticated, local attacker. CVE-2021-40442 - A security feature bypass vulnerability in Excel that can b...
Microsoft Excel Security Feature Bypass
A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-102060)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA.Microsoft Excel is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...
Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities
Microsoft Patch Tuesday – November 2021 Microsoft patched 55 vulnerabilities in their November 2021 Patch Tuesday release, of which six are rated as critical severity and six were previously reported as zero-days. Critical Microsoft Vulnerabilities Patched CVE-2021-42298 - Microsoft Defender Remo...
The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise packages is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Office 2016 RCE Vulnerability (KB4486670)
This host is missing an important security update according to Microsoft KB4486670 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates
On what might seem a relatively calm Patch Tuesday with 55 vulnerabilities being patched, the fact that six of them were rated “Critical” and two of them actively exploited spoils the Zen factor somewhat. Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and...
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Excel and Exchange Server that could be abused t...