10123 matches found
CVE-2023-33133: Heap-based Buffer Overflow
Microsoft Excel Remote Code Execution Vulnerability...
Microsoft Office Excel FreePhisxdb arbitrary free vulnerability
Talos Vulnerability Report TALOS-2023-1730 Microsoft Office Excel FreePhisxdb arbitrary free vulnerability June 13, 2023 CVE Number CVE-2023-32029 SUMMARY An arbitrary free vulnerability exists in the FreePhisxdb functionality of Microsoft Office Excel 2019 Plus 16.0.16130.20218. A...
Microsoft Office Excel WebCharts out-of-bounds write vulnerability
Talos Vulnerability Report TALOS-2023-1734 Microsoft Office Excel WebCharts out-of-bounds write vulnerability June 13, 2023 CVE Number CVE-2023-33133 SUMMARY An access violation vulnerability exists in the WebCharts functionality of Microsoft Office Excel 2019 Plus version 2302 build 16130.20332....
CVE-2023-33137: Double Free
Microsoft Excel Remote Code Execution Vulnerability...
Security Updates for Microsoft Excel Products (June 2023)
The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...
Formula Injection vulnerability in CSV export feature
Description The admidio application is vulnerable to Formula Injection/CSV injection via the Firstname, Lastname input fields. These vulnerabilities allow unauthenticated attackers to execute arbitrary code via a a crafted excel file. Proof of Concept 1. Create a member with role Associations boa...
Advantech WebAccess/SCADA code injection vulnerability
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An arbitrary file overwrite vulnerability exist...
Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks
The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia, Thailand, and Vietnam between February 2022 and April 2023. This includes educational institutions, government agencies, military bodies, and non-profit organizations,...
Foxit PDF Reader PDF Code Execution
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to execute arbitrar...
Microsoft Office Code Execution
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, and Microsoft Office Online Server relates to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability can allow an attacker to execute arbitrary...
CSV Injection
pimcore/customer-management-framework-bundle is vulnerable to CSV Injection. The vulnerability exists because the getExportData function of AbstractExporter.php does not properly escape CSV records in the Firstname, Lastname, Street, Zip & City input fields, which allows an attacker to inject and...
Microsoft Excel Code Execution Vulnerability (CNVD-2023-80165)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Impact The pimcore application is vulnerable to Formula Injection/CSV Injection via the Firstname, Lastname, Street, Zip & City input fields. These vulnerabilities allow unauthenticated attackers to execute arbitrary code via a crafted excel file. Successful exploitation can lead to impacts such ...
Security Updates for Microsoft Excel Products C2R (May 2023)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2023-24953 Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...
Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002386)
This host is missing an important security update according to Microsoft KB5002386 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerability (KB5002384)
This host is missing an important security update according to Microsoft KB5002384 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-24953
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2023-24953
Microsoft Excel Remote Code Execution Vulnerability...
