Lucene search
+L

1035 matches found

ATTACKERKB
ATTACKERKB
added 2018/03/28 4:29 a.m.9 views

CVE-2018-9107

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export...

8.8CVSS5.5AI score0.07159EPSS
SaveExploits5References5
OSV
OSV
added 2018/03/28 4:29 a.m.10 views

CVE-2018-9107

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export...

8.8CVSS5.8AI score0.07159EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2018/03/28 4:0 a.m.40 views

CVE-2018-9106

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export...

8.8AI score0.0544EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2018/03/28 4:0 a.m.34 views

CVE-2018-9107

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export...

8.8AI score0.07159EPSS
SaveExploits5References4
CVE
CVE
added 2018/03/28 4:0 a.m.71 views

CVE-2018-9107

CVE-2018-9107 affects the Joomla! AcyMailing extension (Acymailing) before 5.9.6, where the CSV export feature mishandles a value in the exported data, enabling CSV/Excel macro injection (CSV Injection). Public references describe an attack method for Acymailing Starter 5.9.5 and report CVE-2018-...

8.8CVSS8.7AI score0.07159EPSS
SaveExploits5References4Affected Software1
CVE
CVE
added 2018/03/28 4:0 a.m.69 views

CVE-2018-9106

CVE-2018-9106 affects the Joomla! AcySMS extension prior to 3.5.1. The vulnerability is a CSV Injection/Formula Injection in the export feature, where a value mishandled in a CSV export can be exploited. Documented impact includes CSV injections via exported data, potentially enabling adversaries...

8.8CVSS8.7AI score0.0544EPSS
SaveExploits5References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/03/15 12:0 a.m.34 views

Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20180313)

Security Fixes : - libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula CVE-2018-6871 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108365; scriptversion"1.5";...

9.8CVSS7.1AI score0.22803EPSS
SaveExploits5References2
RedHat Linux
RedHat Linux
added 2018/03/13 6:37 p.m.8 views

libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula

A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially crafted ODS file...

9.8CVSS5.7AI score0.22803EPSS
SaveExploits5References6
RedHat Linux
RedHat Linux
added 2018/03/13 6:37 p.m.80 views

Moderate: Red Hat Security Advisory: libreoffice security update

An update for libreoffice is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

9.8CVSS6.8AI score0.22803EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2018/03/07 12:0 a.m.32 views

RHEL 7 : libreoffice (RHSA-2018:0418)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0418 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

9.8CVSS7.3AI score0.22803EPSS
SaveExploits5References5
RedHat Linux
RedHat Linux
added 2018/03/06 9:46 p.m.644 views

libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula

A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially crafted ODS file...

9.8CVSS5.7AI score0.22803EPSS
SaveExploits5References6
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.10 views

The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

9.3CVSS8.1AI score0.87417EPSS
SaveExploits7References8
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.11 views

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this...

9.3CVSS6.2AI score0.24398EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2018/02/21 12:0 a.m.32 views

Microsoft Office Excel Formula Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

2.6CVSS1.2AI score0.23257EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.11 views

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this...

9.3CVSS6.2AI score0.24582EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.18 views

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

9.3CVSS6.2AI score0.24398EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.10 views

The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor. This allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow...

9.3CVSS6.2AI score0.24398EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.15 views

The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

9.3CVSS6.2AI score0.24398EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2018/02/15 12:0 a.m.33 views

Fedora 27 : libreoffice (2018-3eb4d8e4c4)

The remote Fedora 27 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-3eb4d8e4c4 advisory. - CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula Tenable has extracted the preceding description block directly...

9.8CVSS7.3AI score0.22803EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
added 2018/02/14 5:21 a.m.39 views

CVE-2018-6871

A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially crafted ODS file...

9.8CVSS3.2AI score0.22803EPSS
SaveExploits5References2
Rows per page
Query Builder