Denial Of Service

Heimdal is vulnerable to denial of service. The vulnerability exists due to improper certificate validation which allows an attacker to cause an application crash...

Rocky Linux 8 : libreoffice (RLSA-2022:1766)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1766 advisory. - LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurr...

Oracle Linux 8 : libreoffice (ELSA-2022-7461)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7461 advisory. 6.4.7.2-11.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor=Oracle America, Inc. - Added the --with-hamcrest option to...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : LibreOffice vulnerabilities (USN-5694-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5694-1 advisory. It was discovered that LibreOffice incorrectly handled links using the Office URI Schemes. If a user were tricked into opening a...

SUSE SLED12: libreoffice / libreoffice-base / etc (SUSE-SU-2022:3602-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3602-1 advisory. Updated to version 7.3.6.2 jscSLE-23448: - CVE-2022-3140: Fixed macro URL arbitrary script execution bsc120320...

Siemens Industrial Edge Management

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Industrial Edge Management Vulnerability: Improper Certificate Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject malicious maintenance requests...

Trend Micro Apex One Security Agent Improper Certificate Validation Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One...

CVE-2022-34394

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

Input validation

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

CVE-2022-34394

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

CVE-2022-34394

Dell OS10 (version 10.5.3.4) contains an Improper Certificate Validation vulnerability in the Support Assist component. A remote unauthenticated attacker could perform a man‑in‑the‑middle to access limited switch configuration data. The root cause is TLS certificate validation failure within Supp...

Apache Pulsar Java Client vulnerable to Improper Certificate Validation

Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. Connections from the Pulsar Java Client to the Pulsar Broker/Proxy and connections from the Pulsar Proxy to the Pulsar Broker are vulnerable. Authentication...

PT-2022-9945 · Ibm · Ibm Openbmc Op910 +1

Name of the Vulnerable Software and Affected Versions: IBM OPENBMC OP910 and OP940 affected versions not specified Description: The issue allows a privileged user to upload an improper site identity certificate, potentially causing the system to lose network services. Recommendations: At the...

LibreOffice < 7.2.7 / 7.3.2 Improper Certificate Validation (macOS)

According to its self-reported version, the LibreOffice application running on the remote host is prior to 7.2.7 or 7.3.2. It is, therefore, affected by an Improper Certificate Validation vulnerability where determining if a macro was signed by a trusted author was done by only matching the seria...

LibreOffice < 7.2.7 / 7.3.2 Improper Certificate Validation (Windows)

According to its self-reported version, the LibreOffice application running on the remote host is prior to 7.2.7 or 7.3.2. It is, therefore, affected by an Improper Certificate Validation vulnerability where determining if a macro was signed by a trusted author was done by only matching the seria...

Libre Office 7.2.x < 7.2.7, 7.3.x < 7.3.2 Improper Certificate Validation Vulnerability (Jul 2022) - Linux

Libre Office is prone to an improper certificate validation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice 7.2.x < 7.2.7, 7.3.x < 7.3.2 Improper Certificate Validation Vulnerability (Jul 2022) - Windows

LibreOffice is prone to an improper certificate validation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-26305 Execution of Untrusted Macros Due to Improper Certificate Validation

An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the...

CVE-2022-26305

The vulnerability CVE-2022-26305 affects The Document Foundation LibreOffice, where macro signing verification was weakened by validating a certificate only via serial number and issuer string, not the actual signature. This could allow an attacker to craft a certificate that matches a trusted au...

CVE-2022-26306 Execution of Untrusted Macros Due to Improper Certificate Validation

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which...