3206 matches found
CVE-2023-36268
Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities...
CVE-2023-36268
Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities...
CVE-2023-36268
The connected PT-2024-12555 entry links CVE-2023-36268 to The Document Foundation LibreOffice, describing a denial-of-service vulnerability in LibreOffice 7.4.7 triggered by processing a crafted .ppt file. It notes that version 7.4.7 is affected and, as of the entry, no patch information is avail...
Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2024-003)
The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2024-003 advisory. Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an...
CVE-2023-36268
Removed by vendor...
编号撤回
LibreOffice is an open source office software suite from The Document Foundation tdf. The product contains the applications Writer text documents, Calc spreadsheets, and Impress presentations. This CVE number has been withdrawn...
PT-2024-12555 · Document Foundation · Libreoffice
Name of the Vulnerable Software and Affected Versions: The Document Foundation Libreoffice version 7.4.7 Description: An issue in The Document Foundation Libreoffice allows a remote attacker to cause a denial of service via a crafted .ppt file. Recommendations: For version 7.4.7, consider avoidin...
Low: libreoffice
Issue Overview: Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling ...
Fedora 40 : libreoffice (2024-5f94556a31)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5f94556a31 advisory. Patch for kf6/Qt6 scaling ---- Updated conditionals for kf subpackages ---- 24.2.1.2, include kf6. Tenable has extracted the preceding description block...
Updated libreoffice packages fix security vulnerabilities
Improper input validation enabling arbitrary Gstreamer pipeline injection. CVE-2023-6185 Link targets allow arbitrary script execution. CVE-2023-6186...
MGASA-2024-0116 Updated libreoffice packages fix security vulnerabilities
Improper input validation enabling arbitrary Gstreamer pipeline injection. CVE-2023-6185 Link targets allow arbitrary script execution. CVE-2023-6186...
ROS-20240408-07
A vulnerability in the Gstreamer module of the LibreOffice office suite exists due to failure to take measures to neutralize special elements. to neutralize special elements. Exploitation of the vulnerability could allow an attacker, acting remotely. remotely to run arbitrary Gstreamer plug-ins...
CVE-2024-29182 Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip
Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could ...
CVE-2024-29182
CVE-2024-29182 affects Collabora Online (LibreOffice-based online suite). The vulnerability is a stored cross-site scripting flaw where an attacker can embed an XSS payload in document text referenced by a field; when a user hovers the text to display a tooltip, the payload could execute in the u...
CVE-2024-30265
CVE-2024-30265 affects Voilà (Voila dashboards) with a Local File Inclusion in the static route. The root cause is that StaticFileHandler is initialized with root '/' due to incorrect static_path handling, allowing an attacker to download any file readable by the server user over the network, dep...
CVE-2024-30265 Voilà Local file inclusion
Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the...
Oracle Linux 8 : libreoffice (ELSA-2024-1514)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1514 advisory. - Fix CVE-2023-6185 escape url passed to gstreamer Tenable has extracted the preceding description block directly from the Oracle Linux security...
libreoffice security fix update
6.4.7.2-16.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. 1:6.4.7.2-16 - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols...
RLSA-2024:1514 Important: libreoffice security fix update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...