https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:09:58 +0000 https://vulnerability.circl.lu/vuln/cve-2018-6871 <p>LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.</p> <p>LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.</p> https://vulnerability.circl.lu/vuln/cve-2018-6871 https://vulnerability.circl.lu/vuln/usn-3579-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libreoffice, Ubuntu:16.04:LTS: libreoffice</p> <p>It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. (CVE-2018-6871)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libreoffice, Ubuntu:16.04:LTS: libreoffice</p> <p>It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. (CVE-2018-6871)</p> https://vulnerability.circl.lu/vuln/usn-3579-1