Lucene search
+L

257 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.13 views

The vulnerability of the Microsoft SharePoint Server software allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6.2AI score0.01456EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:00 a.m.8 views

The vulnerability of the Microsoft SharePoint software package, related to the unlimited loading of dangerous type files, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SharePoint software package relates to the unlimited loading of files of a malicious nature. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the SharePoint application pool and the SharePoint server account...

9CVSS7.8AI score0.03718EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/06/10 12:00 a.m.8 views

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2020-64009)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

8.8CVSS7.2AI score0.0313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/06/09 7:44 p.m.9 views

CVE-2020-1318

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...

5AI score0.01488EPSS
SaveExploits0References1
EUVD
EUVD
added 2020/06/09 7:43 p.m.9 views

EUVD-2020-12173

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'...

8.8CVSS8AI score0.02957EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01712EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:00 a.m.19 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.5AI score0.1318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially crafted...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.15 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.8AI score0.31213EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/05/14 12:00 a.m.4 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32106)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS7.9AI score0.03718EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.21 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.18 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/04/16 12:00 a.m.19 views

Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-23442)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS5.9AI score0.01626EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.25 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-23441)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

8.8CVSS7.1AI score0.10695EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.3 views

CVE-2020-0925

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0926...

5.4CVSS6.6AI score0.01515EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.5 views

CVE-2020-0920

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971,...

8.8CVSS7.8AI score0.10413EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2019/12/04 6:10 p.m.69 views

Iran Targets Mideast Oil with ZeroCleare Wiper Malware

A freshly-discovered wiper malware dubbed “ZeroCleare” has been deployed to target the energy and industrial sectors in the Middle East. According to IBM’s X-Force Incident Response and Intelligence Services IRIS, ZeroCleare so-named because of the program database pathname of its binary file was...

1.1AI score
SaveExploits0References10
CNVD
CNVD
added 2019/11/14 12:00 a.m.60 views

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2019-41633)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

6.5CVSS6.2AI score0.0537EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/10 12:00 a.m.7 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-35572)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS6.2AI score0.01515EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.8 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.08328EPSS
SaveExploits0References2
Rows per page
Query Builder