Поиск уязвимостей
Количество 33
Количество 33
ALT-PU-2025-4604
ALT-PU-2025-4604: package `LibreOffice-still` update to version 24.8.5.2-alt1.p10.1
ROS-20250203-06
Множественные уязвимости libreoffice
ALT-PU-2025-2262
ALT-PU-2025-2262: package `LibreOffice-still` update to version 24.8.4.2-alt1
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...
GHSA-6x53-588x-53g2
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.
BDU:2025-00555
Уязвимость пакета офисных программ LibreOffice, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVE-2024-12426
Exposure of Environmental Variables and arbitrary INI file values to a ...
ALT-PU-2025-3991
ALT-PU-2025-3991: package `LibreOffice-still` update to version 24.8.5.2-alt2
GHSA-x7m8-vrfv-272v
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4.
BDU:2025-00554
Уязвимость пакета офисных программ LibreOffice, связанная с недостаточной защитой служебных данных, позволяющая нарушителю раскрыть конфиденциальную информацию
CVE-2025-0514
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
CVE-2025-0514
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
CVE-2025-0514
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
CVE-2025-0514
Improper Input Validation vulnerability in The Document Foundation Lib ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2025-4604 ALT-PU-2025-4604: package `LibreOffice-still` update to version 24.8.5.2-alt1.p10.1 | CVSS3: 7.8 | больше 1 года назад | |
 | ROS-20250203-06 Множественные уязвимости libreoffice | CVSS3: 5.5 | почти 2 года назад | |
| ALT-PU-2025-2262 ALT-PU-2025-2262: package `LibreOffice-still` update to version 24.8.4.2-alt1 | CVSS3: 6.5 | почти 2 года назад | |
 | CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
 | CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 2.8 | 0% Низкий | почти 2 года назад |
 | CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ... | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| GHSA-6x53-588x-53g2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
 | BDU:2025-00555 Уязвимость пакета офисных программ LibreOffice, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 5 | 1% Низкий | почти 2 года назад |
| CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to a ... | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| ALT-PU-2025-3991 ALT-PU-2025-3991: package `LibreOffice-still` update to version 24.8.5.2-alt2 | CVSS3: 7.8 | больше 1 года назад | |
| GHSA-x7m8-vrfv-272v Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. This issue affects LibreOffice: from 24.8 before < 24.8.4. | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| BDU:2025-00554 Уязвимость пакета офисных программ LibreOffice, связанная с недостаточной защитой служебных данных, позволяющая нарушителю раскрыть конфиденциальную информацию | CVSS3: 5.5 | 1% Низкий | почти 2 года назад |
| CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation Lib ... | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу