All products

Red Hat Enterprise Linux 8/libreoffice:flatpak/libreoffice

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column namesCVE-2022-31197 · GHSA-R38F-C4H4-HQQ2 org.postgresql:postgresqlRed Hat Decision Manager 7/jdbc-postgresql MavenRed Hat High Fix reported
libreoffice: Content Manipulation with Certificate Validation AttackCVE-2021-25635 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported
libreoffice: Timestamp Manipulation with Signature WrappingCVE-2021-25634 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported
libreoffice: Content Manipulation with Double Certificate AttackCVE-2021-25633 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported
libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo childrenCVE-2021-25636 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported
libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master PasswordCVE-2022-26306 Red Hat Enterprise Linux 8/libreoffice:flatpak/libreofficeRed Hat Enterprise Linux 9/libreoffice:flatpak/libreoffice Red Hat Medium No fix reported
libreoffice: Execution of Untrusted Macros Due to Improper Certificate ValidationCVE-2022-26305 Red Hat Enterprise Linux 8/libreoffice:flatpak/libreofficeRed Hat Enterprise Linux 9/libreoffice:flatpak/libreoffice Red Hat Medium No fix reported
libreoffice: Weak Master KeysCVE-2022-26307 Red Hat Enterprise Linux 8/libreoffice:flatpak/libreofficeRed Hat Enterprise Linux 9/libreoffice:flatpak/libreoffice Red Hat Medium No fix reported
libreoffice: Macro URL arbitrary script executionCVE-2022-3140 Red Hat Enterprise Linux 7/libreofficeRed Hat Enterprise Linux 8/libreoffice:flatpak/libreoffice Red Hat Medium No fix reported
postgresql: Client memory disclosure when connecting with Kerberos to modified serverCVE-2022-41862 Red Hat Enterprise Linux 6/postgresql-jdbcRed Hat Enterprise Linux 7/postgresql-jdbc Red Hat Low No fix reported
libreoffice: Empty entry in Java class pathCVE-2022-38745 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported
libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin executionCVE-2023-6185 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 8/libreoffice:flatpak/libreoffice Red Hat High No fix reported
libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphicCVE-2024-3044 Red Hat Enterprise Linux 6/libreofficeRed Hat Enterprise Linux 7/libreoffice Red Hat Medium No fix reported