https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:56:34 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6508 <p><strong>Affected:</strong> AlmaLinux:9: autocorr-af, AlmaLinux:9: autocorr-bg, AlmaLinux:9: autocorr-ca, AlmaLinux:9: autocorr-cs, AlmaLinux:9: autocorr-da, AlmaLinux:9: autocorr-de, AlmaLinux:9: autocorr-dsb, AlmaLinux:9: autocorr-el, AlmaLinux:9: autocorr-en, AlmaLinux:9: autocorr-es and 169 more</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>Security Fix(es):</p> <p>* libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: autocorr-af, AlmaLinux:9: autocorr-bg, AlmaLinux:9: autocorr-ca, AlmaLinux:9: autocorr-cs, AlmaLinux:9: autocorr-da, AlmaLinux:9: autocorr-de, AlmaLinux:9: autocorr-dsb, AlmaLinux:9: autocorr-el, AlmaLinux:9: autocorr-en, AlmaLinux:9: autocorr-es and 169 more</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>Security Fix(es):</p> <p>* libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6508 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0477 certfr-2023-avi-0477 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0477 https://cve.radiocsirt.org/vuln/euvd-2026-216146 EUVD-2026-216146 https://cve.radiocsirt.org/vuln/euvd-2026-216146 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1183 <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1183 https://cve.radiocsirt.org/vuln/ghsa-5f9q-hg2v-3887 <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-5f9q-hg2v-3887 https://cve.radiocsirt.org/vuln/gsd-2023-1183 gsd-2023-1183 https://cve.radiocsirt.org/vuln/gsd-2023-1183 https://cve.radiocsirt.org/vuln/oesa-2026-1430 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: hsqldb</p> <p>HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fast database engine which offers both in memory and disk based tables. Embedded and server modes are available. Additionally, it includes tools such as a minimal web server, in-memory query and management tools (can be run as applets or servlets, too) and a number of demonstration examples. Downloaded code should be regarded as being of production quality. The product is currently being used as a database and persistence engine in many Open Source Software projects and even in commercial projects and products! In it&amp;amp;apos;s current version it is extremely stable and reliable. It is best known for its small size, ability to execute completely in memory and its speed. Yet it is a completely functional relational database management system that is completely free under the Modified BSD License. Yes, that&amp;amp;apos;s right, completely free of cost or restrictions! Security Fix(es):</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &amp;quot;database/script&amp;quot; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.(CVE-2023-1183)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: hsqldb</p> <p>HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fast database engine which offers both in memory and disk based tables. Embedded and server modes are available. Additionally, it includes tools such as a minimal web server, in-memory query and management tools (can be run as applets or servlets, too) and a number of demonstration examples. Downloaded code should be regarded as being of production quality. The product is currently being used as a database and persistence engine in many Open Source Software projects and even in commercial projects and products! In it&amp;amp;apos;s current version it is extremely stable and reliable. It is best known for its small size, ability to execute completely in memory and its speed. Yet it is a completely functional relational database management system that is completely free under the Modified BSD License. Yes, that&amp;amp;apos;s right, completely free of cost or restrictions! Security Fix(es):</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &amp;quot;database/script&amp;quot; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.(CVE-2023-1183)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1430 https://cve.radiocsirt.org/vuln/rhsa-2023:6508 <p>libreoffice: Empty entry in Java class path libreoffice: Array index underflow in Calc formula parsing libreoffice: Arbitrary file write libreoffice: Remote documents loaded without prompt via IFrame</p> <p>libreoffice: Empty entry in Java class path libreoffice: Array index underflow in Calc formula parsing libreoffice: Arbitrary file write libreoffice: Remote documents loaded without prompt via IFrame</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6508 https://cve.radiocsirt.org/vuln/suse-su-2023:4648-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/suse-su-2023:4648-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1183 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: hsqldb1.8.0, Ubuntu:Pro:18.04:LTS: hsqldb1.8.0, Ubuntu:Pro:20.04:LTS: hsqldb1.8.0, Ubuntu:22.04:LTS: hsqldb1.8.0</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: hsqldb1.8.0, Ubuntu:Pro:18.04:LTS: hsqldb1.8.0, Ubuntu:Pro:20.04:LTS: hsqldb1.8.0, Ubuntu:22.04:LTS: hsqldb1.8.0</p> <p>A flaw was found in the Libreoffice package. An attacker can craft an odb containing a &#34;database/script&#34; file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1183 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1496 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Dateien zu erzeugen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Dateien zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1496