libreoffice vulnerabilities (Mageia)
61 vulnerabilities.
-
libreofficeMageia Environment/ini-file leaks 6.7 Medium -
libreofficeMageia LFI and GET SSRF via GStreamer and HLS playlists 6.7 Medium -
libreofficeMageia LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href 6.7 Medium -
libreofficeMageia LFI and GET SSRF via calcext:data-mappings and csv provider 6.7 Medium -
libreofficeMageia Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality 6.8 Medium -
libreofficeMageia RCE via calcext:data-mappings, sql provider and jdbc connector 8.5 High -
libreofficeMageia Out of bounds read in PICT image import 5.4 Medium -
libreofficeMageia Package URLs can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeMageia Stack buffer overflow in CFF to Type 1 font conversion 5.4 Medium -
libreofficeMageia Stack buffer overflow in CFF font hint handling 5.4 Medium -
libreofficeMageia Heap buffer overflow in PDF import stream handling 5.4 Medium -
libreofficeMageia Heap buffer overflow in PDF import encryption handling 5.4 Medium -
libreofficeMageia Heap buffer overflow in WMF text record import 5.4 Medium -
libreofficeMageia Heap buffer overflow in spreadsheet tracked-changes import 5.4 Medium -
libreofficeMageia Heap buffer overflow in Calc formula compilation 5.4 Medium -
libreofficeMageia Stack buffer overflow in PPT presentation import 5.4 Medium -
libreofficeMageia Heap buffer overflow in EMF+ gradient brush import 5.4 Medium -
libreofficeMageia Heap use-after-free in ODF number-format blank-width parsing 5.4 Medium -
libreofficeMageia Heap buffer overflow in DXF polyline import 5.4 Medium -
libreofficeMageia Heap Buffer Overflow in AgileEngine 5.4 Medium -
libreofficeMageia PDF signature forgery with adbe.pkcs7.sha1 SubFilter 2.4 Low -
libreofficeMageia Macro URL arbitrary script execution 7.2 High -
libreofficeMageia URL fetching can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeMageia Path traversal leading to arbitrary .ttf file write 2.4 Low -
libreofficeMageia Ability to trust not validated macro signatures removed in high security mode 7.8 High -
libreofficeMageia TLS certificate are not properly verified when utilizing LibreOfficeKit 10.0 Critical -
libreofficeMageia Graphic on-click binding allows unchecked script execution 6.5 Medium -
libreofficeMageia Link targets allow arbitrary script execution 8.3 High -
libreofficeMageia Improper input validation enabling arbitrary Gstreamer pipeline injection 8.3 High -
libreofficeMageia Arbitrary file write 5.0 Medium -
libreofficeMageia Remote documents loaded without prompt via IFrame 5.3 Medium -
libreofficeMageia Array Index UnderFlow in Calc Formula Parsing 7.8 High -
libreofficeMageia Macro URL arbitrary script execution 6.3 Medium -
libreofficeMageia Content Manipulation with Certificate Validation Attack 5.2 Medium -
libreofficeMageia Timestamp Manipulation with Signature Wrapping 7.5 High -
libreofficeMageia Updated libreoffice packages fix security vulnerability No score -
libreofficeMageia Content Manipulation with Double Certificate Attack 7.5 High -
libreofficeMageia Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save 5.3 Medium -
libreofficeMageia Unsafe URL assembly flaw in allowed script location check 7.8 High -
libreofficeMageia Insufficient URL decoding flaw in categorizing macro location 7.8 High -
libreofficeMageia Insufficient URL encoding flaw in allowed script location check 7.8 High -
libreofficeMageia LibreLogo global-event script execution 9.8 Critical -
libreofficeMageia Insufficient url validation allowing LibreLogo script execution 9.8 Critical -
libreofficeMageia LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are... 4.3 Medium -
libreofficeMageia LibreOffice has a feature where documents can specify that pre-installed scripts can be executed... 9.8 Critical -
libreofficeMageia It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory... 7.8 High -
libreofficeMageia An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice... 7.5 High -
libreofficeMageia The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4... 7.8 High -
libreofficeMageia sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an... 7.8 High -
libreofficeMageia LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via... 9.8 Critical - Show olderLoading…