Lucene search
+L

1030 matches found

CNVD
CNVD
added 2021/12/19 12:0 a.m.31 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-102059)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA.Microsoft Excel is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

7.8CVSS2.9AI score0.02064EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/12 12:0 a.m.34 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-102060)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA.Microsoft Excel is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

7.8CVSS2.9AI score0.0207EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/03 8:15 p.m.8 views

CVE-2021-38424

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application...

7.8CVSS7.1AI score0.00479EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/03 8:15 p.m.27 views

CVE-2021-38424

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application...

7.8CVSS0.00479EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/03 8:15 p.m.19 views

Code injection

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application...

6.8CVSS7.5AI score0.00479EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/03 7:5 p.m.21 views

CVE-2021-38424 Delta Electronics DIALink

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application...

5.9CVSS7.7AI score0.00479EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/03 5:15 p.m.5 views

UBUNTU-CVE-2021-27836

An issue was discoverered in in function xlsgetWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file...

6.5CVSS5.8AI score0.01122EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/03 11:15 a.m.23 views

CVE-2021-40848

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

7.8CVSS0.00958EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/03 11:15 a.m.15 views

CVE-2021-40848

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

7.8CVSS7.2AI score
SaveExploits0References2
Prion
Prion
added 2021/11/03 11:15 a.m.18 views

Input validation

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

6.8CVSS7.7AI score0.00958EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/03 10:11 a.m.27 views

CVE-2021-40848

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection...

8.6AI score0.00958EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/03 12:0 a.m.18 views

Libxls 代码问题漏洞

libxls is a C library that can read Excel xls files. libxls version 1.6.2 contains a null pointer dereference vulnerability in the xlsgetWorkSheet function in xls.c. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted XLS file...

6.5CVSS5.6AI score0.01122EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/10/21 6:29 p.m.6 views

CVE-2021-38424

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application...

7.8CVSS7AI score0.00479EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 4:32 p.m.5 views

DRUPAL-CONTRIB-2021-043

This module enables aklump/loft\data\grids to be used as a Drupal module. Excel support was provided by , which is abandoned and there are known security vulnerabilities: CVE-2018-19277: PHPOffice/PhpSpreadsheet771. Excel support has since been replaced with the newer library. This module provide...

6.9AI score
SaveExploits0References1
Talos
Talos
added 2021/10/12 12:0 a.m.76 views

Microsoft Office Excel 2019/365 ConditionalFormatting code execution vulnerability

Talos Vulnerability Report TALOS-2021-1259 Microsoft Office Excel 2019/365 ConditionalFormatting code execution vulnerability October 12, 2021 CVE Number CVE-2021-40474 Details Microsoft Office is a suite of tools used for productivity in both a corporate environment as well as by end-users. It...

7.8CVSS0.6AI score0.02194EPSS
SaveExploits0
CNVD
CNVD
added 2021/08/11 12:0 a.m.41 views

IBM Planning Analytics has an unspecified vulnerability (CNVD-2021-61430)

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation. The solution supports automated execution of business planning, budgeting, and analysis processes.A security vulnerability exists in the Planning Analytics spreadsheet service component of IBM Planning...

4.9CVSS2.7AI score0.01093EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/09 4:45 p.m.28 views

Security Bulletin: IBM Planning Analytics Spreadsheet Services is affected by security vulnerabilities

Summary The Planning Analytics Spreadsheet Services component of IBM Planning Analytics is affected by security vulnerabilties. These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Spreadsheet Services Release 67. Vulnerability Details CVEID: CVE-2021-23926...

9.1CVSS0.6AI score0.06215EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/08/09 12:0 a.m.5 views

IBM Planning Analytics 安全漏洞

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation. The solution supports automated execution of business planning, budgeting, and analysis processes.A security vulnerability exists in the Planning Analytics spreadsheet service component of IBM Planning...

4.9CVSS5.8AI score0.01093EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/07/21 12:0 a.m.23 views

SheetJS Pro has an unspecified vulnerability

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...

5.5CVSS4.7AI score0.0088EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/19 2:15 p.m.6 views

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.5CVSS7.3AI score0.0088EPSS
SaveExploits0References4
Rows per page
Query Builder