CVE-2024-31386

Cross-Site Request Forgery CSRF vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out the Box Shopstar!, Modernthemesnet...

CVE-2024-31386 Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out the Box Shopstar!, Modernthemesnet...

WordPress i-excel theme <= 1.7.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme i-excel versions = 1.7.9...

CVE-2024-31386: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out the Box Shopstar!, Modernthemesnet...

WordPress i-excel Theme <= 1.7.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software i-excel Type Theme Vulnerable versions = 1.7.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31386 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2bb8b92e7d22 Credits Dhabaleshwar Das Required...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Excel and Sharepoint. The vulnerability in Excel allows a malicious person to execute arbitrary code with the victim's privileges. For successful exploitation, the malicious party must trick the victim into opening a rogue file. The vulnerability in Sharepoi...

Microsoft Office 365 (2016 Click-to-Run) Remote Code Execution Vulnerability (Apr 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update March 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2024-26257

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2024-26257

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-26257

CVE-2024-26257 affects Microsoft Excel (Office) with a remote code execution vulnerability. Base CVSS v3.1 score 7.8 (HIGH): attack vector LOCAL, requires user interaction, no privileges required, and impacts C/I/A HIGH. Root cause/details are not fully described in the documents, but Microsoft r...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Excel security vulnerabilities

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2024-26257: Double Free

Microsoft Excel Remote Code Execution Vulnerability...

VulnCheck KEV: CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

April 2, 2024, update for Excel 2016 (KB5002577)

None None...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

NetentSec NS-ASG security vulnerability

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/exportexceluser.php file...