4980 matches found
PT-2022-4158 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Office Online Server affected versions not specified Description: The issue is related to insufficient input validation in Office Online Server, which can be exploited to execute arbitrary code ...
Security Updates for Microsoft Excel Products (August 2022)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
CVE-2022-33631: Protection Mechanism Failure
Microsoft Excel Security Feature Bypass Vulnerability...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...
CVE-2022-33648: Undefined Security Weakness
Microsoft Excel Remote Code Execution Vulnerability...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Office Excel. The vulnerability arises from a failure of a network system or product to properly filter specific elements of externally entered data duri...
KLA12606 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office ca...
CVE-2022-1539
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
CVE-2022-1539 Exports and Reports < 0.9.2 - Contributor+ CSV Injection
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
PT-2022-13940
Name of the Vulnerable Software and Affected Versions Exports and Reports WordPress plugin versions prior to 0.9.2 Description The issue arises from the plugin's failure to sanitize and validate data when generating CSV exports. This could lead to a CSV injection, potentially utilizing the...
CVE-2022-1539: Improper Neutralization of Formula Elements in a CSV File
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
The vulnerability of Microsoft Excel editors, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Formula Injection in Exported Data
Impact Datasets exported to file e.g. CSV / XLS are not sufficiently sanitized, to neutralize potential formula injection Patches - The issue is addressed in the upcoming 0.8.0 release - This fix will also be back-ported to the 0.7.x branch, applied to the 0.7.2 release Workarounds Users exportin...
The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages lies in the lack of proper validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
Remote code execution
Microsoft Excel Remote Code Execution Vulnerability...