Lucene search
+L

3589 matches found

Positive Technologies
Positive Technologies
added 2020/08/11 12:00 a.m.5 views

PT-2020-3709 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests by Microsoft SharePoint Server. An authenticated attacker could...

5.4CVSS5.5AI score0.01586EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:00 a.m.35 views

Security Updates for Microsoft SharePoint 2016 (August 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

8.8CVSS6AI score0.04906EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2020/08/09 12:00 a.m.6 views

PT-2020-3984 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. This could allow a remote attacker to perform cross-site scripting...

5.4CVSS5.7AI score0.01634EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/08/04 12:00 a.m.29 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-64007)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01604EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/04 12:00 a.m.17 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-64006)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.02229EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers or by...

5.4CVSS6.4AI score0.01565EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.02229EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to insufficient cleaning of web requests, allows attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/07/30 12:00 a.m.13 views

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2020-45185)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS6.5AI score0.01654EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/30 12:00 a.m.23 views

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2020-45183)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.20 views

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to object handling errors in memory. Exploiting thes...

9CVSS8.1AI score0.1063EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.18 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.21 views

The vulnerability of PerformancePoint Services in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.

The vulnerability of PerformancePoint Services in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS8AI score0.20265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.17 views

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing an intruder to gain unauthorized access to protected information.

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to errors in memory object handling. Exploiting thes...

6.8CVSS6.3AI score0.06411EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted message...

4.3CVSS7AI score0.0905EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:00 a.m.10 views

The vulnerability of the Microsoft .NET Framework software platform, Microsoft Visual Studio for software development, and Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages, related to errors in processing XML requests, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...

10CVSS7.6AI score0.93966EPSS
SaveExploits10References8Affected Software3
Tenable Nessus
Tenable Nessus
added 2020/07/15 12:00 a.m.232 views

Security Updates for Microsoft SharePoint Server (July 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token...

9.8CVSS7.4AI score0.93966EPSS
SaveExploits11References27
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1451

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456...

5.4CVSS6.3AI score0.01604EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1450

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...

5.4CVSS6.3AI score0.01604EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.8 views

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint...

5.4CVSS6.7AI score0.01565EPSS
SaveExploits0References1
Rows per page
Query Builder