Lucene search
+L

257 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/23 12:00 a.m.16 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrar...

9CVSS8AI score0.76397EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation programs is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to...

9CVSS8.1AI score0.82081EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation programs is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to...

9CVSS8.1AI score0.01941EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/28 12:00 a.m.16 views

The vulnerability of the Microsoft SharePoint software package arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft SharePoint software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.01547EPSS
SaveExploits0References2
NCSC
NCSC
added 2022/11/08 12:00 a.m.17 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in the Microsoft Office. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Bypassing authentication Bypassing security measure Remote code execution User rights Accessing sensitive data The vulnerabili...

8.8CVSS7.2AI score0.02304EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/13 7:15 p.m.4 views

CVE-2022-35823

Microsoft SharePoint Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.52885EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

5.5CVSS6.3AI score0.02472EPSS
SaveExploits0References4
NCSC
NCSC
added 2022/05/10 12:00 a.m.14 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a remote malicious person to execute arbitrary code under the user's privileges or to bypass a security measure. Microsoft Office Excel: |----------------|------|-------------------------------------| | CVE ID | CVSS |...

9.3CVSS7.1AI score0.11905EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:00 a.m.18 views

The vulnerability of Microsoft SharePoint Server software, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request from a remote location...

8.7CVSS8.2AI score0.03023EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.15 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks...

8.5CVSS6.7AI score0.01516EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/09 5:15 p.m.3 views

CVE-2022-22005

Microsoft SharePoint Server Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.16825EPSS
SaveExploits0References1
NCSC
NCSC
added 2022/02/08 12:00 a.m.14 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Spoofing...

8.8CVSS7.5AI score0.16825EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.16 views

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

8.7CVSS7.8AI score0.06593EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/29 11:15 p.m.4 views

CVE-2021-43876

Microsoft SharePoint Elevation of Privilege Vulnerability...

8.8CVSS5.8AI score0.01918EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 3:15 p.m.6 views

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability...

8.8CVSS6.2AI score0.02662EPSS
SaveExploits0References3Affected Software4
OSV
OSV
added 2021/10/13 1:15 a.m.3 views

CVE-2021-40487

Microsoft SharePoint Server Remote Code Execution Vulnerability...

8.1CVSS5.9AI score0.48205EPSS
SaveExploits0References2
FireEye
FireEye
added 2021/08/10 3:00 p.m.728 views

UNC215: Spotlight on a Chinese Espionage Campaign in Israel

This blog post details the post-compromise tradecraft and operational tactics, techniques, and procedures TTPs of a Chinese espionage group we track as UNC215. While UNC215’s targets are located throughout the Middle East, Europe, Asia, and North America, this report focuses on intrusion activity...

7.5CVSS0.1AI score0.99913EPSS
SaveExploits30References8
Zero Day Initiative
Zero Day Initiative
added 2021/07/19 12:00 a.m.51 views

Microsoft SharePoint Missing Check of Message Integrity Vulnerability

This vulnerability allows network-adjacent attackers to tamper with update data on affected installations of Microsoft SharePoint. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of SharePoint Help updates. The issue results from a missing...

3.5CVSS1.5AI score0.06086EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/13 12:00 a.m.8 views

Microsoft Office SharePoint 代码注入漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code injection...

8.8CVSS7.7AI score0.06593EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/05/12 12:00 a.m.16 views

Microsoft SharePoint Spoofing Vulnerability (CNVD-2021-45270)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

7.6CVSS6.3AI score0.01569EPSS
SaveExploits0References1
Rows per page
Query Builder