libreoffice vulnerabilities (Ubuntu)
78 vulnerabilities.
-
libreofficeUbuntu Environment/ini-file leaks 6.7 Medium -
libreofficeUbuntu LFI and GET SSRF via GStreamer and HLS playlists 6.7 Medium -
libreofficeUbuntu LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href 6.7 Medium -
libreofficeUbuntu LFI and GET SSRF via calcext:data-mappings and csv provider 6.7 Medium -
libreofficeUbuntu Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality 6.8 Medium -
libreofficeUbuntu RCE via calcext:data-mappings, sql provider and jdbc connector 8.5 High -
libreofficeUbuntu Out of bounds read in PICT image import 5.4 Medium -
libreofficeUbuntu Package URLs can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeUbuntu Stack buffer overflow in CFF to Type 1 font conversion 5.4 Medium -
libreofficeUbuntu Stack buffer overflow in CFF font hint handling 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in PDF import stream handling 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in PDF import encryption handling 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in WMF text record import 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in spreadsheet tracked-changes import 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in Calc formula compilation 5.4 Medium -
libreofficeUbuntu Stack buffer overflow in PPT presentation import 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in OOXML text box element import 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in EMF+ gradient brush import 5.4 Medium -
libreofficeUbuntu Heap use-after-free in ODF number-format blank-width parsing 5.4 Medium -
libreofficeUbuntu Heap buffer overflow in DXF polyline import 5.4 Medium -
libreofficeUbuntu Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite... 7.3 High -
libreofficeUbuntu Heap Buffer Overflow in AgileEngine 5.4 Medium -
libreofficeUbuntu PDF signature forgery with adbe.pkcs7.sha1 SubFilter 2.4 Low -
libreofficeUbuntu Macro URL arbitrary script execution 7.2 High -
libreofficeUbuntu URL fetching can be used to exfiltrate arbitrary INI file values and environment variables 6.7 Medium -
libreofficeUbuntu Path traversal leading to arbitrary .ttf file write 2.4 Low -
libreofficeUbuntu Signatures in "repair mode" should not be trusted 7.8 High -
libreofficeUbuntu Ability to trust not validated macro signatures removed in high security mode 7.8 High -
libreofficeUbuntu TLS certificate are not properly verified when utilizing LibreOfficeKit 10.0 Critical -
libreofficeUbuntu Graphic on-click binding allows unchecked script execution 6.5 Medium -
libreofficeUbuntu An issue in The Document Foundation Libreoffice v.7.4.7 allows a remote attacker to cause a... 5.7 Medium -
libreofficeUbuntu libreoffice vulnerabilities No score -
libreofficeUbuntu Link targets allow arbitrary script execution 8.3 High -
libreofficeUbuntu Improper input validation enabling arbitrary Gstreamer pipeline injection 8.3 High -
libreofficeUbuntu Remote documents loaded without prompt via IFrame 5.3 Medium -
libreofficeUbuntu Array Index UnderFlow in Calc Formula Parsing 7.8 High -
libreofficeUbuntu Apache OpenOffice: Empty entry in Java class path 7.8 High -
libreofficeUbuntu Macro URL arbitrary script execution 6.3 Medium -
libreofficeUbuntu Weak Master Keys 8.8 High -
libreofficeUbuntu Execution of Untrusted Macros Due to Improper Certificate Validation 7.5 High -
libreofficeUbuntu Execution of Untrusted Macros Due to Improper Certificate Validation 7.5 High -
libreofficeUbuntu Incorrect trust validation of signature with ambiguous KeyInfo children 7.5 High -
libreofficeUbuntu Timestamp Manipulation with Signature Wrapping 7.5 High -
libreofficeUbuntu Content Manipulation with Double Certificate Attack 7.5 High -
libreofficeUbuntu XForms submissions could overwrite local files 6.5 Medium -
libreofficeUbuntu remote graphics contained in docx format retrieved in 'stealth mode' 5.3 Medium -
libreofficeUbuntu Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save 5.3 Medium -
libreofficeUbuntu Unsafe URL assembly flaw in allowed script location check 7.8 High -
libreofficeUbuntu Insufficient URL decoding flaw in categorizing macro location 7.8 High -
libreofficeUbuntu Insufficient URL encoding flaw in allowed script location check 7.8 High - Show olderLoading…