Vulnerabilidades

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /apps/onlyoffice/ajax/settings/address endpoint does not sufficiently validate the user-supplied Document Server URL before initiating outbound connections. An authenticated administrator can…

wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas. Attackers can inject formulas like =HYPERLINK to exfiltrate admin data or execute code when admins open the exported file in Excel or LibreOffice Calc.

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.join(tempDir.name, fileName) without reducing it to a base name. A filename containing ../ can escape the temporary directory because…

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.