https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:56:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03147 bdu:2019-03147 https://cve.radiocsirt.org/vuln/bdu:2019-03147 https://cve.radiocsirt.org/vuln/certfr-2019-avi-401 certfr-2019-avi-401 https://cve.radiocsirt.org/vuln/certfr-2019-avi-401 https://cve.radiocsirt.org/vuln/cnvd-2019-39680 cnvd-2019-39680 https://cve.radiocsirt.org/vuln/cnvd-2019-39680 https://cve.radiocsirt.org/vuln/euvd-2026-164622 EUVD-2026-164622 https://cve.radiocsirt.org/vuln/euvd-2026-164622 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9850 <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9850 https://cve.radiocsirt.org/vuln/ghsa-vq62-85wx-mmv3 <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> https://cve.radiocsirt.org/vuln/ghsa-vq62-85wx-mmv3 https://cve.radiocsirt.org/vuln/gsd-2019-9850 gsd-2019-9850 https://cve.radiocsirt.org/vuln/gsd-2019-9850 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2057-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2057-1 https://cve.radiocsirt.org/vuln/rhsa-2020:1151 <p>libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands libreoffice: Remote resources protection module not applied to bullet graphics libreoffice: Insufficient URL validation allowing LibreLogo script execution libreoffice: LibreLogo global-event script execution libreoffice: Insufficient URL encoding flaw in allowed script location check libreoffice: Insufficient URL decoding flaw in categorizing macro location libreoffice: Unsafe URL assembly flaw in allowed script location check</p> <p>libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands libreoffice: Remote resources protection module not applied to bullet graphics libreoffice: Insufficient URL validation allowing LibreLogo script execution libreoffice: LibreLogo global-event script execution libreoffice: Insufficient URL encoding flaw in allowed script location check libreoffice: Insufficient URL decoding flaw in categorizing macro location libreoffice: Unsafe URL assembly flaw in allowed script location check</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1151 https://cve.radiocsirt.org/vuln/suse-su-2019:2231-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2231-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9850 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libreoffice, Ubuntu:18.04:LTS: libreoffice</p> <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libreoffice, Ubuntu:18.04:LTS: libreoffice</p> <p>LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9850 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2484 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2484