MS15-012: Description of the security update for Microsoft Excel 2013: February 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Office file in an affected version of Office software.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-21051)

WPS Office is a Kingsoft office software produced by the office software, you can realize the office software commonly used text, forms, presentations and other functions. WPS Office memory corruption vulnerability, attackers can use the vulnerability to cause the program to crash, or access to...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-22874)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. WPS Office has a memory corruption vulnerability that can be exploited by attackers to cause a denial o...

Memory Corruption Vulnerability in SoftZone Office (RZoffice)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. SoftZone Office RZoffice has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service or code...

exploitdb-bin-sploits

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is intended to serve as the...

SQL Injection Vulnerability in WebOA Network Office Automation Software

WebOA network office automation software is an office software that allows company employees to download and upload shared information through a browser. A SQL injection vulnerability exists in WebOA Network Office Automation Software. An attacker can exploit the vulnerability to obtain sensitive...

MS15-116: Description of the security update for Publisher 2013: November 10, 2015

MS15-116: Description of the security update for Publisher 2013: November 10, 2015 Summary This security update resolves vulnerabilities in Microsoft Publisher 2013 that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these...

LibreOffice Security Restriction Bypass Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice. An attacker could exploit the vulnerability to bypass...

SQL Injection Vulnerability in Cisco Collaboration OA Office Software

Cisco collaborative OA office software system is a collaborative OA office software developed by Guangdong Cisco Technology Co. SQL injection vulnerability exists in Cisco Collaborative OA Office Software, which can be exploited by attackers to obtain database information...

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27311)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

Arbitrary file deletion vulnerability in Tongda OA system (CNVD-2019-12765)

Tongda OA 2017 version is an office software system. Tongda OA system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

CVE-2018-8573

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539...

CVE-2018-8158

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-8157, CVE-2018-8161...

Heap Overflow Vulnerability in WPS Office ocr Module

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A heap overflow vulnerability exists in the OCR module Image to Text of WPS OFFICE when...

ShoprLynx 9.2.3 Insecure File Permissions

ShaprLynx v9.2.3 Insecure File Permissions Vendor: Lynx Software Pty Ltd. Product web page: https://www.sharplynx.com Affected version: 9.02.0003 Summary: Back Office Software for Sharp POS Terminals. Catering for the needs of retail and hospitality businesses, SharpLynx has been developed as a...

Microsoft Word 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011721)

This host is missing an important security update according to Microsoft KB4011721 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Web Apps Server 2013 RCE And Information Disclosure Vulnerabilities (KB4011692)

This host is missing an important security update according to Microsoft KB4011692 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Excel Security Feature Bypass

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document. The security feature bypass by itself does not allow arbitrary code execution. To successfully exploit the vulnerability, an attacker would have to embed a control in ...

SoftZone Office suffers from a denial of service vulnerability (CNVD-2018-06120)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A denial-of-service vulnerability exists in SoftZone Office when dealing with special doc files. An attacker can exploit the vulnerability...

Null pointer reference vulnerability in WPS Office 2016 presentation pptreader module

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the pptreader module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attac...