24153 matches found
Security Bulletin: Immutable.js Denial of Service Vulnerabilities in Content Cortex for Microsoft Office
Summary Immutable.js versions before 4.3.9 and 5.1.8 have two DoS vulnerabilities CVSS 7.5, High. CVE-2026-59879 is an integer overflow in List operations set, setSize, setIn, updateIn that can cause infinite loops or unbounded memory allocation when given index/size values between 2^30 and 2^31...
[SECURITY] Fedora 43 Update: python-wsgidav-4.3.5-1.fc43
A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...
CVE-2026-70332
CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-70332
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability
...
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
KLA91193 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...
EUVD-2026-52536
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-62870
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-67554
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
KLA91186 ACE vulnerability in Microsoft Office
Arbitrary code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-62870 Exploitation CVE list CVE-2026-62870 critical KB list 5002886 Solution Install necessary updates from the KB section,...
EUVD-2025-210534
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
CVE-2025-67406
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
CVE-2025-67406
CVE-2025-67406 concerns an SQL Injection in Advocate office management system 1.0. The vulnerability resides in activate_case.php (parameter id, accessed via GET http://localhost/advocate/kortex_lite/control/activate_case.php?id=1) where unsanitized user input is interpolated into an SQL query. D...
CVE-2025-67406
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
Spring Office Hours Podcast: S5E19 - Docker, Compose, Testcontainers, Oh My!
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun will discuss some of the new features around Docker, Testcontainers and the Spring Boot plugin. You can participate in our live stream to ask questions or catch the replay on your...
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise, позволяющая нарушителю выполнить произвольный код
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
CVE-2026-65695 Office-Word-MCP-Server 1.1.11 Path Traversal via document tools
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...
KLA91177 PE vulnerabilities in Microsoft Office
Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure DNS can be exploited remotely to gain privileges. 2. An...