Lucene search
+L

4408 matches found

Microsoft KB
Microsoft KB
added 2022/04/12 8:00 a.m.121 views

Description of the security update for SharePoint Enterprise Server 2016: April 12, 2022 (KB5002183)

None None...

8CVSS7AI score0.02449EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.11 views

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to execute arbitrary code on the system...

7.8CVSS8.9AI score0.02449EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2666

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Excel, allowing a remote attacker to execute arbitrary code. This can be exploited by remote attackers,...

9.3CVSS7.5AI score0.02449EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.6 views

PT-2022-2909 · Microsoft · Office Web Apps Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office Web Apps Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel and Microsoft Office Web Apps Server, which...

9.3CVSS9.7AI score0.03708EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.12 views

Microsoft Excel 代码注入漏洞

Microsoft Office is a suite of office software products from Microsoft Corporation USA. Microsoft Office Excel is vulnerable to remote code execution. The vulnerability stems from the process of constructing code segments from external input data, where the network system or product fails to...

7.8CVSS8.4AI score0.02055EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2022/04/12 12:00 a.m.45 views

KLA12511 Remote code execution vulnerability in Windows Apps

Remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-26903 Related products Microsoft-Excel Microsoft-Word CVE list CVE-2022-26903 critical KB list Solution Install necessary updates...

9.3CVSS8.3AI score0.02577EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.9 views

PT-2022-2664

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Excel. It allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no...

9.3CVSS7.5AI score0.02055EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:00 a.m.56 views

Security Updates for Microsoft Excel Products (April 2022)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-24473, CVE-2022-26901...

7.8CVSS8.5AI score0.02449EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/03/28 12:00 a.m.30 views

Microsoft Office 2010 Remote Code Execution Vulnerability (KB4486698)

Microsoft Office 2010 is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

9.3CVSS7.9AI score0.03244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.13 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code on the target system.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created file...

7.8CVSS8.2AI score0.02603EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/03/03 5:18 p.m.230 views

Phishing Campaign Targeted Those Aiding Ukraine Refugees

Cyberattackers used a compromised Ukrainian military email address to phish EU government employees who’ve been involved in managing the logistics of refugees fleeing Ukraine, according to a new report. Ukraine has been at the center of an unprecedented wave of cyberattacks in recent weeks and...

8.5AI score
SaveExploits0References8
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.72 views

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory...

9.3CVSS2.8AI score0.21805EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.103 views

Microsoft Excel Featheader Record Memory Corruption Vulnerability

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset...

9.3CVSS8AI score0.85731EPSS
SaveIn wildExploits11
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.6 views

VulnCheck KEV: CVE-2019-1297

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory...

9.3CVSS7.7AI score0.21805EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.14 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint lies in the lack of data protection measures, which allows attackers to gain unauthorized access to devices.

The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to devices...

5.5CVSS6.2AI score0.04604EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/11 9:15 p.m.9 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS7.9AI score0.01874EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/11 9:15 p.m.30 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS0.01874EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/11 9:15 p.m.11 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

7.8CVSS6.3AI score0.01874EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/11 9:15 p.m.20 views

Design/Logic Flaw

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS7.9AI score0.01874EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/11 8:08 p.m.36 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

8.1AI score0.01874EPSS
SaveExploits1References2
Rows per page
Query Builder