Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…Check if you run itEPSS 1.04%Oct 13, 2026
- Medium4.3An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1.Check if you run itEPSS 0.27%May 26, 2026
- Medium5.0ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an…Check if you run itEPSS 0.32%Apr 16, 2026
- Medium6.2In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.Check if you run itEPSS 0.16%Apr 16, 2026
- High7.1FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.38%Mar 24, 2026
- Medium5.3NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management.Open the advisoryNov 17, 2025
- Critical9.8ONLYOFFICE Docs Server Path Traversal VulnerabilityPatch nowKEVEPSS 19.35%Jan 26, 2021
7 records · page 1 of 1
PreviousNext