Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,904 results · page 24 of 59
Nov 8, 2024An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant CVE-2024-50588 · Other software · HASOMED · reported by 551230f0-3615-47bd-b7cc-93e92e730bbfCritical 9.8
An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enables an attacker to create and overwrite arbitrary files on the server filesystem with the rights of the Firebird database ("NT AUTHORITY\SYSTEM").
- Product
- Elefant
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhasomed.der.sec-consult.com
Nov 1, 2024Woffice Core: Missing AuthorizationCVE-2024-37470 · WordPress plugins & themes · reported by PatchstackHigh 8.2
Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core: from n/a through 5.4.8.
- Product
- Woffice Core
- Affected
- up to 5.4.8
- What to do
- Affects up to 5.4.8. Update Woffice Core to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Oct 8, 2024Microsoft Office Remote Code Execution VulnerabilityCVE-2024-43616 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Remote Code Execution Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Microsoft Office Spoofing VulnerabilityCVE-2024-43609 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Microsoft Office Spoofing Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Microsoft Office Remote Code Execution VulnerabilityCVE-2024-43576 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Remote Code Execution Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-43505 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Visio Remote Code Execution Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.CVE-2024-45278 · Websites & servers · SAP_SE · reported by cna@sap.comMedium 5.4
SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
- Product
- SAP Commerce Backoffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45291 · Websites & servers · PHPOffice · reported by GitHubMedium 6.3
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links images from arbitrary paths. When embedding images has been enabled in HTML writer with `$writer->setEmbedImages(true);` those files will be included in the output as `data:` URLs, regardless of the file's type. Also URLs can be used for embedding, resulting in a Server-Side Request Forgery vulnerability. When embedding images has been enabled, an attacker can read arbitrary files on the server and perform arbitrary HTTP GET requests. Note that any PHP protocol wrappers can be used, meaning that if for example the `expect://` wrapper is enabled, also remote code execution is possible. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. there are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45290 · Websites & servers · PHPOffice · reported by GitHubHigh 7.7
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by reading the file contents, if the provided path is a URL. By using specially crafted `php://filter` URLs an attacker can leak the contents of any file or URL. Note that this vulnerability is different from GHSA-w9xv-qf98-ccq4, and resides in a different component. An attacker can access any file on the server, or leak information form arbitrary URLs, potentially exposing sensitive information such as AWS IAM credentials. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45060 · Websites & servers · PHPOffice · reported by GitHubHigh 7.1
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting (XSS) vulnerability due to improper handling of input where a number is expected leading to formula injection. The code in in `45_Quadratic_equation_solver.php` concatenates the user supplied parameters directly into spreadsheet formulas. This allows an attacker to take control over the formula and output unsanitized data into the page, resulting in JavaScript execution. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45293 · Websites & servers · PHPOffice · reported by GitHubHigh 7.5
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel (XLSX) sheets, Server files and sensitive information can be disclosed by providing a crafted sheet. The security scan function in src/PhpSpreadsheet/Reader/Security/XmlScanner.php contains a flawed XML encoding check to retrieve the input file's XML encoding in the toUtf8 function. The function searches for the XML encoding through a defined regex which looks for `encoding="*"` and/or `encoding='*'`, if not found, it defaults to the UTF-8 encoding which bypasses the conversion logic. This logic can be used to pass a UTF-7 encoded XXE payload, by utilizing a whitespace before or after the = in the attribute definition. Sensitive information disclosure through the XXE on sites that allow users to upload their own excel spreadsheets, and parse them using PHPSpreadsheet's Excel parser. This issue has been addressed in release versions 1.29.1, 2.1.1, and 2.3.0. All users are advised to upgrade. Th
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45292 · Websites & servers · PHPOffice · reported by GitHubMedium 5.4
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html` does not sanitize "javascript:" URLs from hyperlink `href` attributes, resulting in a Cross-Site Scripting vulnerability. This issue has been addressed in release versions 1.29.2, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 2024This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints.CVE-2024-47657 · Other software · Shilpi Computers · reported by vdisclose@cert-in.org.inHigh 7.1
This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive information belonging to other users.
- Product
- Net Back Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2024New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI prCVE-2024-47222 · Other software · Myoffice · reported by MITRECritical 9.8
New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol.
- Product
- MY Office SDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmyoffice.rusupport.myoffice.ru
Sep 19, 2024Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-38016 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Visio Remote Code Execution Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints.CVE-2024-47086 · Other software · Apex Softcell · reported by vdisclose@cert-in.org.inHigh 8.7
This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts.
- Product
- LD DP Back Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API enCVE-2024-47085 · Other software · Apex Softcell · reported by vdisclose@cert-in.org.inHigh 8.7
This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
- Product
- LD DP Back Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2024Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreCVE-2024-7788 · Other software · The Document Foundation · reported by security@documentfoundation.orgHigh 7.8
Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.
- Product
- LibreOffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlibreoffice.orglists.debian.org
Sep 13, 2024SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via aCVE-2024-44430 · Other software · best_free_law_office_management_software · reported by MITRECritical 9.8
SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/control/register_case.php interface
- Product
- best_free_law_office_management_software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.csdn.netgithub.com
Sep 10, 2024Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-43463 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Visio Remote Code Execution Vulnerability
- Product
- Microsoft 365 Apps for Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2024-38250 · Email & office · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
- Product
- Microsoft Office for Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitiCVE-2024-37728 · Other software · officeweb365 · reported by MITREHigh 7.5
Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface
- Product
- officeweb365
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2024ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro.CVE-2024-44085 · Other software · onlyoffice · reported by MITREMedium 6.1
ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of an immediately-invoked function expression (IIFE) for a macro. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446 and CVE-2023-50883.
- Product
- docs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2024ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by direCVE-2023-50883 · Other software · onlyoffice · reported by MITREMedium 6.1
ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446.
- Product
- docs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2024This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints.CVE-2024-8601 · Other software · TechExcel Software Solutions · reported by vdisclose@cert-in.org.inHigh 8.7
This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized access to sensitive information belonging to other users.
- Product
- Back Office Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2024A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31.CVE-2024-8367 · Other software · HM Courts & Tribunals Service · reported by VulDBMedium 5.1
A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java of the component Markdown Handler. The manipulation leads to injection. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as d90230d7cf575e5b0852d56660104c8bd2503c34. It is recommended to apply a patch to fix this issue.
- Product
- Probate Back Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 29, 2024Collabora Online is a collaborative online office suite based on LibreOffice technology.CVE-2024-45045 · Other software · CollaboraOnline · reported by GitHubMedium 6.3
Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url encoded values in links contained in documents. Since the Android JavaScript interface allows access to internal functions, the likelihood that the app could be compromised via this vulnerability is considered high. Non-mobile variants are not affected. Mobile variants should update to the latest version provided by the platform appstore. There are no known workarounds for this vulnerability.
- Product
- online
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 28, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45048 · Websites & servers · PHPOffice · reported by GitHubHigh 8.8
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is muted. This vulnerability has been addressed in release version 2.2.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 28, 2024PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.CVE-2024-45046 · Websites & servers · PHPOffice · reported by GitHubMedium 5.4
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't sanitize spreadsheet styling information such as font names, allowing an attacker to inject arbitrary JavaScript on the page. As a result an attacker may used a crafted spreadsheet to fully takeover a session of a user viewing spreadsheet files as HTML. This issue has been addressed in release version 2.1.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
- Product
- PhpSpreadsheet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2024Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint CentCVE-2024-38869 · Other software · ManageEngine · reported by 0fc0942c-577d-436f-ae8e-945763c79b02High 8.3
Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.
- Product
- Endpoint Central
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2024Collabora Online is a collaborative online office suite based on LibreOffice.CVE-2024-37311 · Other software · CollaboraOnline · reported by GitHubHigh 8.2
Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.
- Product
- online
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 15, 2024Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attCVE-2024-7263 · Other software · Kingsoft · reported by security@eset.comCritical 9.3
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0.17119 to mitigate CVE-2024-7262 was not restrictive enough. Another parameter was not properly sanitized which leads to the execution of an arbitrary Windows library.
- Product
- WPS Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 15, 2024Kingsoft WPS Office Path Traversal VulnerabilityCVE-2024-7262 · Other software · Kingsoft · reported by security@eset.comExploitedCritical 9.3
Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.
- Product
- WPS Office
- On CISA’s list since
- Sep 3, 2024 (federal fix deadline Sep 24, 2024)
- What to do
- Attackers are using this now. Install Kingsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogwps.comcisa.gov
Aug 13, 2024Microsoft Outlook Remote Code Execution VulnerabilityCVE-2024-38173 · Email & office · Microsoft · reported by secure@microsoft.comMedium 6.7
Microsoft Outlook Remote Code Execution Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Microsoft PowerPoint Remote Code Execution VulnerabilityCVE-2024-38171 · Email & office · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-38169 · Email & office · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Office Visio Remote Code Execution Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Microsoft OfficePlus Elevation of Privilege VulnerabilityCVE-2024-38084 · Email & office · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft OfficePlus Elevation of Privilege Vulnerability
- Product
- Microsoft OfficePLUS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024Woffice: Incorrect Privilege AssignmentCVE-2024-43153 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.
- Product
- Woffice
- Affected
- up to 5.4.10
- What to do
- Affects up to 5.4.10. Update Woffice to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Aug 13, 2024SAP Commerce Backoffice does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability causing low impact on confideCVE-2024-41735 · Websites & servers · SAP_SE · reported by cna@sap.comMedium 5.4
SAP Commerce Backoffice does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability causing low impact on confidentiality and integrity of the application.
- Product
- SAP Commerce Backoffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 12, 2024Microsoft Office Spoofing VulnerabilityCVE-2024-38200 · Email & office · Microsoft · reported by secure@microsoft.comMedium 6.5
Microsoft Office Spoofing Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 6, 2024Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view daCVE-2024-39817 · Other software · Cybozu, Inc. · reported by vultures@jpcert.or.jpMedium 6.5
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.
- Product
- Cybozu Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjvn.jpkb.cybozu.support
Aug 5, 2024dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.CVE-2024-41376 · Other software · dzzoffice · reported by MITREHigh 8.8
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
- Product
- dzzoffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 5, 2024Certificate Validation user interface in LibreOffice allows potential vulnerability.CVE-2024-6472 · Other software · The Document Foundation · reported by security@documentfoundation.orgHigh 7.8
Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the macro is executed. Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway. This issue affects LibreOffice: from 24.2 before 24.2.5.
- Product
- LibreOffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 31, 2024The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface.CVE-2024-39318 · Other software · ibexa · reported by GitHubMedium 5.4
The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface. The file upload widget is vulnerable to XSS payloads in filenames. Access permission to upload files is required. As such, in most cases only authenticated editors and administrators will have the required permission. It is not persistent, i.e. the payload is only executed during the upload. In effect, an attacker will have to trick an editor/administrator into uploading a strangely named file.
- Product
- admin-ui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevelopers.ibexa.cogithub.com
Jul 16, 2024Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security).CVE-2024-21136 · Other software · Oracle Corporation · reported by secalert_us@oracle.comHigh 8.6
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Office accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
- Product
- Retail Xstore Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Microsoft Outlook Remote Code Execution VulnerabilityCVE-2024-38021 · Email & office · Microsoft · reported by secure@microsoft.comHigh 8.8
Microsoft Outlook Remote Code Execution Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Microsoft Outlook Spoofing VulnerabilityCVE-2024-38020 · Email & office · Microsoft · reported by secure@microsoft.comMedium 6.5
Microsoft Outlook Spoofing Vulnerability
- Product
- Microsoft Office 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 4, 2024Woffice: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-37472 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.8.
- Product
- Woffice
- Affected
- up to 5.4.8
- What to do
- Affects up to 5.4.8. Update Woffice to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jul 4, 2024Woffice Core: Cross Site Scripting (XSS)CVE-2024-37471 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice Core allows Reflected XSS.This issue affects Woffice Core: from n/a through 5.4.8.
- Product
- Woffice Core
- Affected
- up to 5.4.8
- What to do
- Affects up to 5.4.8. Update Woffice Core to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Jun 27, 2024An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215.CVE-2023-7270 · Other software · SoftMaker Software GmbH · reported by 551230f0-3615-47bd-b7cc-93e92e730bbfMedium 5.3
An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 2021 is also affected, but won't be fixed. The SoftMaker Office and FreeOffice MSI installer files were found to produce a visible conhost.exe window running as the SYSTEM user when using the repair function of msiexec.exe. This allows a local, low-privileged attacker to use a chain of actions, to open a fully functional cmd.exe with the privileges of the SYSTEM user.
- Product
- Office
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgr.sec-consult.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.