Sql injection

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

Escape code on Description field when exporting to CSV

When opening CSV files exported through the CSV Export of Jira on Excel, if there are written Excel codes on it, they will run automatically. The suggestion is to provide a setting/configuration that automatically escape special characters on the export...

March 12, 2019—KB4489881 (Monthly Rollup)

None None...

CVE-2019-0669

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to reading data beyond the buffer in memory. This allows attackers to gain access to protected information.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, stems from the reading of data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker to gain access to protected information by using a specially created...

CVE-2019-0669

CVE-2019-0669 is an information-disclosure vulnerability in Microsoft Excel where memory contents can be disclosed when a crafted document is opened. The issue arises from Excel failing to properly isolate or protect memory contents during document processing, enabling an attacker to obtain data ...

CVE-2019-0669

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...

CVE-2019-0669

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...

Microsoft Office Excel Note Record Information Disclosure (CVE-2018-8382)

An information disclosure vulnerability exists in Microsoft Excel. The vulnerability is due to a missing length verification in the parsing of workbook streams. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Office Excel Parsed Expression Information Disclosure (CVE-2018-8246)

An information disclosure vulnerability exists in Microsoft Office Excel. The vulnerability is due to the inclusion of uninitialized memory when processing of parsed expressions in FORMULA records in Excel workbooks. Successful exploitation would allow the attacker to disclose sensitive informati...

Trickbot Malware Goes After Remote Desktop Credentials

The banking trojan known as Trickbot has resurfaced, with an updated info-stealing module that allows it to harvest remote desktop application credentials. According to Trend Micro’s Noel Anthony Llimos and Carl Maverick Pascual, a new variant has recently come on the scene, and is being spread v...

Security Update for Microsoft Office (Feb 2019) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by a vulnerability that allows remote attackers to bypass authentication to execute an arbitrary command through the protocol- compliant traffic. C Tenable...

Microsoft Excel Information Disclosure Vulnerability (CNVD-2020-62339)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to obtain information to compromise a user's computer or data...

Microsoft Excel 2010 Service Pack 2 Security Feature Bypass Vulnerability (KB4462186)

This host is missing an important security update according to Microsoft KB4462186 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Information Disclosure Vulnerability (KB4461597)

This host is missing an important security update according to Microsoft KB4461597 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office Compatibility Pack Service Pack 3 Security Feature Bypass Vulnerability (KB4461607)

This host is missing an important security update according to Microsoft KB4461607 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office Security Feature Bypass Vulnerabilities (KB4092465)

This host is missing an important security update according to Microsoft KB4092465 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2016 Security Feature Bypass Vulnerability (KB4462115)

This host is missing an important security update according to Microsoft KB4462186 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel Viewer Security Feature Bypass Vulnerability (KB4461608)

This host is missing an important security update according to Microsoft KB4461608 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...