CVE-2013-1290

CVE-2013-1290 affects Microsoft SharePoint Server 2013 in configurations using legacy My Sites, where default access controls for a SharePoint list are not properly enforced. This allows remote authenticated users to disclose list item data by directly requesting a list’s location, i.e., informat...

MS13-030: Description of the security update for SharePoint Server 2013 (coreserver): April 9, 2013

This update resolves a security vulnerability that exists in Microsoft SharePoint Server 2013 that could allow information disclosure.Introduction This update resolves a security vulnerability that exists in Microsoft SharePoint Server 2013 that could allow information disclosure.SummaryMicrosoft...

Description of the Office Web Apps Server update: April 9, 2013

None None...

MS13-030: Vulnerability in SharePoint could allow information disclosure: April 9, 2013

This update resolves a security vulnerability in Microsoft SharePoint Server 2013 that could allow information disclosure.IntroductionMicrosoft has released security bulletin MS13-030. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

CVE-2013-0084

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0085

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

Buffer overflow

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

Design/Logic Flaw

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

Directory traversal

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0083

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

CVE-2013-0083

CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...

Microsoft SharePoint Server Privilege Elevation Vulnerabilities (2780176)

This host is missing a critical security update according to Microsoft Bulletin MS13-024. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft XML Core Services整数截断漏洞（MS13-002)

CVECAN ID: CVE-2013-0006 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft XML Core Services在解析XML内容时存在整数溢出错误，可被利用远程执行任意代码。 0 Microsoft Office 2007 Microsoft Office Office 2003 Professional Edi Microsoft Office 2003 Student and Teacher Edi Microsoft Office 2003 Standard Edition Microsoft Office 2003...

Microsoft XML Core Services XSLT解析漏洞（MS13-002)

CVECAN ID: CVE-2013-0007 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft XML Core Services在解析 XSLT 内容时存在不明细节错误，可被利用导致内存破坏,甚至执行任意代码。 0 Microsoft Office 2007 Microsoft Office Office 2003 Professional Edi Microsoft Office 2003 Student and Teacher Edi Microsoft Office 2003 Standard Edition Microsoft Offi...

Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)

This host is missing a critical security update according to Microsoft Bulletin MS13-002. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office SharePoint Server 2007 (KB2687497) 32-Bit Edition

A security vulnerability exists in Microsoft Office SharePoint Server 2007 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office SharePoint Server 2007 (KB2687497) 64-Bit Edition

A security vulnerability exists in Microsoft Office SharePoint Server 2007 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability

Description Microsoft XML Core Services is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Expression...