Lucene search
+L

267 matches found

OSV
OSV
•added 2021/11/22 9:15 a.m.•28 views

CVE-2021-33491

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records...

6.5CVSS6.9AI score
SaveExploits0References3
Prion
Prion
•added 2021/11/22 9:15 a.m.•32 views

Directory traversal

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records...

4CVSS6.5AI score0.02516EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2021/11/22 8:12 a.m.•46 views

CVE-2021-33491

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records...

6.8AI score0.02516EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
•added 2021/11/22 12:00 a.m.•4 views

PT-2021-20153

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.5 Description The issue arises from the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records, allowing Directory Traversal via ../ in an OOXML or ODF ZIP archive...

6.5CVSS0.02516EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2021/10/18 12:00 a.m.•27 views

Debian: Security Advisory (DSA-4988-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00733EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/10/18 12:00 a.m.•48 views

LibreOffice Trust Management Issues Vulnerability (CNVD-2022-55627)

LibreOffice is a suite that is compatible with other major office softwares and can be executed on a variety of platforms. A vulnerability exists in LibreOffice due to a trust management issue. An attacker could use this vulnerability to create digitally signed ODF documents by manipulating the...

7.5CVSS7.2AI score0.00733EPSS
SaveExploits0References1
Debian
Debian
•added 2021/10/16 7:23 p.m.•71 views

[SECURITY] [DSA 4988-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4988-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 16, 2021 https://www.debian.org/security/faq -...

7.5CVSS7.2AI score0.00733EPSS
SaveExploits0
NVD
NVD
•added 2021/10/12 2:15 p.m.•28 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS0.00708EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/12 2:15 p.m.•22 views

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

5CVSS5.9AI score0.00708EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2021/10/12 2:15 p.m.•10 views

UBUNTU-CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.9AI score0.00708EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/10/12 2:15 p.m.•36 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7AI score0.00708EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/10/12 1:33 p.m.•46 views

CVE-2021-25634 Timestamp Manipulation with Signature Wrapping

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

6.2AI score0.00708EPSS
SaveExploits0References2
Mend
Mend
•added 2021/10/12 1:33 p.m.•1 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

8.7CVSS0.00708EPSS
SaveExploits0References3
CVE
CVE
•added 2021/10/12 1:33 p.m.•227 views

CVE-2021-25634

Summary: CVE-2021-25634 is a LibreOffice vulnerability described as an Improper Certificate Validation issue that allows an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp, which LibreOffice may incorrectly treat as valid. The issue affects The Do...

7.5CVSS6AI score0.00708EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2021/10/12 1:33 p.m.•53 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.2AI score0.00708EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/12 12:00 a.m.•4 views

CVE-2021-25634: Improper Certificate Validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.2AI score0.00708EPSS
SaveExploits0References3
OSV
OSV
•added 2021/10/11 5:15 p.m.•20 views

DEBIAN-CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.6AI score0.00733EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/11 5:15 p.m.•18 views

CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS0.00733EPSS
SaveExploits0References2
OSV
OSV
•added 2021/10/11 5:15 p.m.•12 views

CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.4AI score
SaveExploits0References2
Prion
Prion
•added 2021/10/11 5:15 p.m.•35 views

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

5CVSS7.2AI score0.00733EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder