4408 matches found
Security Updates for Microsoft Excel Products C2R (October 2018)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View. An attacker who successfully...
Security Updates for Microsoft Excel Products C2R (February 2022)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-22716 %NASLMINLEVEL 70300 C Tenable, Inc...
Security Updates for Microsoft Excel Products C2R (September 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-38655, CVE-2021-38660 %NASLMINLEV...
Security Updates for Microsoft Excel Products C2R (June 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied...
Security Updates for Microsoft Excel Products C2R (April 2019)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited t...
Security Updates for Microsoft Excel Products C2R (November 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Improper Restriction of XML External Entity Reference in Apache POI
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...
GHSA-2JVJ-MHF2-G99W SilverStripe CSV Excel Macro Injection
In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...
Microsoft Excel 2013 Remote Code Execution Vulnerability (KB5002204)
This host is missing a critical security update according to Microsoft KB5002204 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002196)
This host is missing a critical security update according to Microsoft KB5002196 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29109
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29109
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
