Поиск уязвимостей
Количество 15
Количество 15
ROS-20250203-06
Множественные уязвимости libreoffice
ALT-PU-2025-2262
ALT-PU-2025-2262: package `LibreOffice-still` update to version 24.8.4.2-alt1
ALT-PU-2025-4604
ALT-PU-2025-4604: package `LibreOffice-still` update to version 24.8.5.2-alt1.p10.1
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to a ...
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...
GHSA-x7m8-vrfv-272v
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
GHSA-6x53-588x-53g2
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
BDU:2025-00555
Уязвимость пакета офисных программ LibreOffice, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных
BDU:2025-00554
Уязвимость пакета офисных программ LibreOffice, связанная с недостаточной защитой служебных данных, позволяющая нарушителю раскрыть конфиденциальную информацию
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20250203-06 Множественные уязвимости libreoffice | CVSS3: 5.5 | почти 2 года назад | |
| ALT-PU-2025-2262 ALT-PU-2025-2262: package `LibreOffice-still` update to version 24.8.4.2-alt1 | CVSS3: 6.5 | почти 2 года назад | |
| ALT-PU-2025-4604 ALT-PU-2025-4604: package `LibreOffice-still` update to version 24.8.5.2-alt1.p10.1 | CVSS3: 7.8 | больше 1 года назад | |
 | CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
 | CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 5 | 1% Низкий | почти 2 года назад |
 | CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to a ... | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 2.8 | 0% Низкий | почти 2 года назад |
| CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ... | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| GHSA-x7m8-vrfv-272v Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| GHSA-6x53-588x-53g2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
 | BDU:2025-00555 Уязвимость пакета офисных программ LibreOffice, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| BDU:2025-00554 Уязвимость пакета офисных программ LibreOffice, связанная с недостаточной защитой служебных данных, позволяющая нарушителю раскрыть конфиденциальную информацию | CVSS3: 5.5 | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу