Lucene search
+L

3458 matches found

Symantec
Symantec
added 2019/10/08 12:0 a.m.76 views

Microsoft SharePoint Server CVE-2019-1328 Spoofing Vulnerability

Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...

0.1AI score0.01515EPSS
SaveExploits0Affected Software2
Symantec
Symantec
added 2019/10/08 12:0 a.m.39 views

Microsoft SharePoint Server CVE-2019-1329 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint...

0.3AI score0.01515EPSS
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.08328EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.8 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.08328EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2019/09/24 12:0 a.m.553 views

Microsoft SharePoint 2013 SP1 Cross Site Scripting

Microsoft SharePoint 2013 SP1 Stored XSS Vulnerability Vendor: Microsoft Corporation Product web page: https://www.microsoft.com Affected version: 2013 SP1 Summary: SharePoint is a web-based collaborative platform that integrates with Microsoft Office. Launched in 2001, SharePoint is primarily so...

3.5CVSS5.9AI score0.02993EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.11659EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:0 a.m.6 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management lies in errors during the processing of authentication requests for applications. This allows a hacker to perform cross-site forgery of these requests.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management is related to errors in processing authentication requests for applications. Exploiting this vulnerability can allow a...

6.4CVSS5.3AI score0.01553EPSS
SaveExploits0References2
NVD
NVD
added 2019/09/11 10:15 p.m.18 views

CVE-2019-1262

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

5.4CVSS5.3AI score0.02993EPSS
SaveExploits5References2
OSV
OSV
added 2019/09/11 10:15 p.m.2 views

CVE-2019-1262

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

5.4CVSS5.8AI score0.02993EPSS
SaveExploits5References2
CVE
CVE
added 2019/09/11 9:24 p.m.187 views

CVE-2019-1262

CVE-2019-1262 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of certain web requests. An authenticated attacker could exploit this by sending a crafted request to an affected SharePoint server, enabling the attacker to execute scripts ...

5.4CVSS5.1AI score0.02993EPSS
SaveExploits5References2Affected Software1
Microsoft KB
Microsoft KB
added 2019/09/10 7:0 a.m.53 views

Description of the security update for SharePoint Server 2019: September 10, 2019

None None...

8.8CVSS6.7AI score0.11659EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/09/10 7:0 a.m.191 views

Description of the security update for SharePoint Server 2019 Language Pack: September 10, 2019

None None...

6.5CVSS6.6AI score0.02617EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server stems from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.2AI score0.01675EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/08/21 12:0 a.m.6 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34777)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01675EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/08/16 12:0 a.m.119 views

Security Updates for Microsoft SharePoint Server (August 2019)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...

9.8CVSS6.8AI score0.0486EPSS
SaveExploits0References11
OSV
OSV
added 2019/08/14 9:15 p.m.5 views

CVE-2019-1203

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS6.2AI score0.01675EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/14 9:15 p.m.22 views

CVE-2019-1203

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS5.6AI score0.01675EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/14 9:15 p.m.26 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

3.5CVSS5.5AI score0.01675EPSS
SaveExploits0References1Affected Software2
Microsoft KB
Microsoft KB
added 2019/08/13 7:0 a.m.277 views

Description of the security update for SharePoint Server 2010: August 13, 2019

Description of the security update for SharePoint Server 2010: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about these vulnerabilities, see...

9.3CVSS7.6AI score0.0486EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/08/13 7:0 a.m.54 views

Description of the security update for SharePoint Server 2010 Office Web Apps: August 13, 2019

Description of the security update for SharePoint Server 2010 Office Web Apps: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerabilit...

9.3CVSS7.6AI score0.0486EPSS
SaveExploits0
Rows per page
Query Builder