Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:09:57 +0000 cnvd-2021-17247 https://cve.radiocsirt.org/vuln/cnvd-2021-17247 cnvd-2021-17247 https://cve.radiocsirt.org/vuln/cnvd-2021-17247 EUVD-2026-24929 https://cve.radiocsirt.org/vuln/euvd-2026-24929 EUVD-2026-24929 https://cve.radiocsirt.org/vuln/euvd-2026-24929 fkie_cve-2021-25830 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25830 <p>A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.</p> <p>A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25830 GHSA-5mvf-vvh4-mj9c https://cve.radiocsirt.org/vuln/ghsa-5mvf-vvh4-mj9c <p>A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.</p> <p>A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.</p> https://cve.radiocsirt.org/vuln/ghsa-5mvf-vvh4-mj9c gsd-2021-25830 https://cve.radiocsirt.org/vuln/gsd-2021-25830 gsd-2021-25830 https://cve.radiocsirt.org/vuln/gsd-2021-25830