Lucene search
+L

9326 matches found

BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attack...

6.1CVSS6.9AI score0.02677EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.14 views

The vulnerability in the software interface of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server’s API packages allows a perpetrator to execute arbitrary code.

The vulnerability of the software interface APIs of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.9CVSS8.1AI score0.01979EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.13 views

The vulnerability of the ASP.NET components of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient input validation, allowing attackers to execute arbitrary code.

The vulnerability of ASP.NET package components in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code through a...

9CVSS8.1AI score0.03703EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9.9CVSS8AI score0.02154EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.14 views

The vulnerability of the Microsoft SharePoint Foundation software, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Foundation software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using specially crafted requests...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/09/18 12:00 a.m.5 views

PT-2020-4324 · Microsoft · Windows Media Player +2

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation versions affected versions not specified Windows Media Player versions affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Media Foundation...

8.8CVSS8.3AI score0.09836EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2020/09/15 4:00 p.m.4 views

CVE-2020-8346

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

5.5CVSS5.7AI score0.00247EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/15 3:15 p.m.17 views

Denial of service

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

2.1CVSS5.4AI score0.00247EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/09/14 12:00 a.m.28 views

IBM Jazz Foundation WEB UI Cross-Site Scripting Vulnerability

IBM Jazz Foundation is a suite of collaborative lifecycle management solutions. A cross-site scripting vulnerability exists in the IBM Jazz Foundation WEB UI, which can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or...

5.4CVSS5.8AI score0.00561EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/09/09 3:23 p.m.9 views

jenkins-git-plugin: stored cross-site scripting

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability...

5.4CVSS5.6AI score0.00853EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:00 a.m.10 views

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

5.5CVSS6.7AI score0.03568EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:00 a.m.12 views

The vulnerability of the Windows Media Foundation component of the Windows operating system allows attackers to gain privileges to install programs, view, modify, or delete data, as well as create new user accounts with full user rights.

The vulnerability of the Windows Media Foundation component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain privileges to install programs, view, modify, or delete data, and create...

7.8CVSS7.4AI score0.03463EPSS
SaveExploits0References3
Microsoft Security Update
Microsoft Security Update
added 2020/09/08 5:00 p.m.16 views

Security Update for Microsoft SharePoint Foundation 2013 (KB4484525) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

2.5AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/09/08 5:00 p.m.14 views

Security Update for Microsoft SharePoint Foundation 2013 (KB4484525)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

2.5AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/09/08 5:00 p.m.12 views

Security Update for Microsoft SharePoint Foundation 2013 (KB4484488)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

2.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.47 views

Description of the security update for SharePoint Foundation 2013: September 8, 2020

Description of the security update for SharePoint Foundation 2013: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

9.9CVSS7.3AI score0.02677EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.68 views

Description of the security update for SharePoint Foundation 2010: September 8, 2020

Description of the security update for SharePoint Foundation 2010: September 8, 2020 Note: To make this update take effect, you have to install the August 2020 security updates for .NET Framework 3.5 that are listed in CVE-2020-1046 according to your operating system. For more information about...

8.8CVSS7.4AI score0.03703EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.60 views

Description of the security update for SharePoint Foundation 2013: September 8, 2020

Description of the security update for SharePoint Foundation 2013: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

8.8CVSS7.7AI score0.03703EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.7 views

PT-2020-4034 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

8.9CVSS8.2AI score0.02217EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.6 views

PT-2020-4036 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A tampering issue exists due to...

6.3CVSS6.5AI score0.01807EPSS
SaveExploits1References5
Rows per page
Query Builder