The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...

Security Update for Microsoft Office Web Apps Server 2013 (KB4486760) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4486760)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

jetty: local temporary directory hijacking vulnerability

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub...

Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122...

PT-2020-5238 · Microsoft · Office Web Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft 365 Apps for...

PT-2020-5267 · Microsoft · Office Online Server +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions prior to the fixed version Microsoft Office Web Apps affected versions not specified Microsoft 365 Apps affected versions not specified Microsoft Office affected versions not specified Office Online Server affected...

jetty: local temporary directory hijacking vulnerability

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub...

An End-to-End Approach to Next-Gen Web Application and API Security

It was almost 10 years ago that Marc Andreessen wrote that software is eating the world. It is still true today, but I would be even more specific and say that web applications and APIs are eating the world. Our businesses run on web apps and APIs, and their ubiquity means that securing them has...

Security Update for Microsoft Office Web Apps Server 2013 (KB4486727) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (November 2020)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by unspecified remote code execution vulnerabilities. An attacker can use a specially crafted Office file to exploit these vulnerabilities. CVE-2020-17064, CVE-2020-17065 C Tenabl...

Security Update for Microsoft Office Web Apps Server 2013 (KB4486689)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4486689) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (October 2020)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker...

Security Update for Microsoft Office Web Apps Server 2013 (KB4484518) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4484518)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Office Web Apps Server 2013: September 8, 2020

None None...

Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the...

Security Updates for Microsoft Office Web Apps (September 2020)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the...

Pocsuite

This is an offensive tool for vulnerability exploitation. It is a Python-based framework for developing and executing proof-of-concept PoC exploits, primarily targeting web applications. The framework, known as Pocsuite, is designed to simplify the process of creating and executing exploits, maki...