EUVD-2016-7698

Malware in sbrugna...

EUVD-2013-2146

Malware in sbrugna...

EUVD-2017-4169

Malware in sbrugna...

EUVD-2007-4557

Malware in sbrugna...

EUVD-2021-28832

Malicious code in bioql PyPI...

EUVD-2021-27616

Malicious code in bioql PyPI...

EUVD-2022-31423

Malicious code in bioql PyPI...

EUVD-2022-41312

Malicious code in bioql PyPI...

EUVD-2021-28833

Malicious code in bioql PyPI...

EUVD-2022-40033

Malicious code in bioql PyPI...

EUVD-2022-40034

Malicious code in bioql PyPI...

EUVD-2025-30391

Malicious code in bioql PyPI...

EUVD-2021-28831

Malicious code in bioql PyPI...

CVE-2025-10777 JSC R7 R7-Office Document Server downloadas path traversal

A flaw has been found in JSC R7 R7-Office Document Server up to 20250820. Impacted is an unknown function of the file /downloadas/. Executing manipulation of the argument cmd can lead to path traversal. The attack can be launched remotely. Upgrading to version 2025.3.1.923 is recommended to addre...

CVE-2025-10777

CVE-2025-10777 affects the JSC R7 R7-Office Document Server (versions up to 20250820). A flaw in an unknown function of the file /downloadas/ allows remote exploitation by manipulating the cmd argument to trigger a path traversal. The vendor confirms this vulnerability and specifies a fix in rele...

Linux Distros Unpatched Vulnerability : CVE-2022-26874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/Horde/Mime/Viewer/Ooo.php in Horde MimeViewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail...

TencentOS Server 3: libreoffice (TSSA-2023:0006)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0006 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2022-37400

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where the required initialization vector for encryption was always the same...

CVE-2021-30245

The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-https hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to...

CVE-2021-41832

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory...