Lucene search
+L

8474 matches found

CNVD
CNVD
added 2019/08/20 12:00 a.m.8 views

Aspose Aspose.Cells Number record parser code execution vulnerability

Aspose Aspose.Cells is an Excel spreadsheet programming API Application Programming Interface from Aspose Australia.Number record parser is one of the number record parser. A code execution vulnerability exists in the Number record parser in Aspose Aspose.Cells version 19.1.0, which can be...

9.8CVSS7.8AI score0.0314EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/15 5:15 p.m.20 views

CVE-2019-14422

An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:file1?path2:file2 U...

8.8CVSS8.9AI score0.16391EPSS
SaveExploits6References2
OSV
OSV
added 2019/08/15 5:15 p.m.10 views

CVE-2019-14422

An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:file1?path2:file2 U...

8.8CVSS7.5AI score0.16391EPSS
SaveExploits6References2
Prion
Prion
added 2019/08/15 5:15 p.m.25 views

Open redirect

An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:file1?path2:file2 U...

6.8CVSS8.9AI score0.16391EPSS
SaveExploits6References2Affected Software1
CVE
CVE
added 2019/08/15 4:02 p.m.102 views

CVE-2019-14422

CVE-2019-14422 affects TortoiseSVN 1.12.1, where the tsvncmd: URI handler can perform a customised diff operation on Excel files via tsvncmd:command:diff?path:[file1]?path2:[file2]. For xls files, it runs diff-xls.js with wscript, opening files without macro security warnings and potentially exec...

8.8CVSS8.8AI score0.16391EPSS
SaveExploits6References2Affected Software1
Cvelist
Cvelist
added 2019/08/15 4:02 p.m.50 views

CVE-2019-14422

An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:file1?path2:file2 U...

8.9AI score0.16391EPSS
SaveExploits6References2
exploitpack
exploitpack
added 2019/08/14 12:00 a.m.64 views

TortoiseSVN 1.12.1 - Remote Code Execution

TortoiseSVN 1.12.1 - Remote Code Execution Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

6.8CVSS9.1AI score0.16391EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2019/08/14 12:00 a.m.397 views

TortoiseSVN 1.12.1 - Remote Code Execution

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

8.8CVSS7.9AI score0.16391EPSS
SaveExploits6
CNVD
CNVD
added 2019/08/14 12:00 a.m.15 views

TortoiseSVN v1.12.1 Remote Code Execution Vulnerability

TortoiseSVN is an open source client program for the Subversion version control system. A remote code execution vulnerability exists in TortoiseSVN version 1.12.1, which stems from a URI handler Tsvncmd: that allows a customized diff operation on an Excel workbook, which could be used to open a...

8.8CVSS8.2AI score0.16391EPSS
SaveExploits6References1
Packet Storm
Packet Storm
added 2019/08/13 12:00 a.m.146 views

TortoiseSVN 1.12.1 Remote Code Execution

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

7.1CVSS7.1AI score0.16391EPSS
SaveExploits7
Vulnerability Lab
Vulnerability Lab
added 2019/08/13 12:00 a.m.326 views

TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

6.8CVSS0.4AI score0.16391EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2019/08/12 12:00 a.m.185 views

osTicket 1.12 - Formula Injection

Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE: CVE-2019-14749 1. Description An issu...

8.8CVSS7.9AI score0.09612EPSS
SaveExploits4
Vulnerability Lab
Vulnerability Lab
added 2019/08/12 12:00 a.m.73 views

TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

8.8CVSS8.8AI score0.16391EPSS
SaveExploits6
Microsoft KB
Microsoft KB
added 2019/08/06 12:00 a.m.9 views

August 6, 2019, update for Excel 2016 (KB4475550)

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/05 12:00 a.m.38 views

Security Updates for Microsoft Office (July 2019) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable...

9.3CVSS8.2AI score0.1316EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/08/02 12:00 a.m.8 views

The vulnerability of the LibreLogo software module of the LibreOffice office software package allows a hacker to execute arbitrary code on the target system.

The vulnerability of the LibreLogo software module of the LibreOffice office software package exists due to the presence of mechanisms within LibreLogo that execute programming algorithms in Python when the cursor is placed over a malicious object. Exploiting this vulnerability allows a malicious...

10CVSS8.2AI score0.31215EPSS
SaveExploits4References12Affected Software7
Cvelist
Cvelist
added 2019/07/29 2:09 p.m.33 views

CVE-2019-1112

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...

6.6AI score0.08743EPSS
SaveExploits0References1
CVE
CVE
added 2019/07/29 2:09 p.m.117 views

CVE-2019-1112

CVE-2019-1112 — Microsoft Excel Information Disclosure Vulnerability : Multiple sources (NVD, Microsoft/MSRC, Red Hat, Tenable) describe an information disclosure flaw in Excel where memory contents can be exposed. Exploitation involves crafting a document and convincing a user to open it; the at...

5.5CVSS5.6AI score0.08743EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/07/29 2:09 p.m.36 views

CVE-2019-1111

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110...

8.9AI score0.1316EPSS
SaveExploits0References1
CVE
CVE
added 2019/07/29 2:09 p.m.220 views

CVE-2019-1111

CVE-2019-1111 describes a remote code execution vulnerability in Microsoft Excel due to improper handling of in-memory objects. Exploitation could allow arbitrary code execution in the context of the current user; with administrative rights, control of the system is possible. The vulnerability is...

9.3CVSS8.8AI score0.1316EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder