Lucene search
+L

3589 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of restrictions on file downloads, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.8AI score0.05182EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01526EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.15 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01488EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01666EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.16 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to enhance their privileges through a specially crafted request...

9CVSS7.5AI score0.02957EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/06/25 12:00 a.m.37 views

Microsoft SharePoint Server 2019 < 16.0.10361.12114 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...

8.8CVSS7.9AI score0.69303EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
added 2020/06/25 12:00 a.m.33 views

Microsoft SharePoint Server 2016 < 16.0.5005.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

8.8CVSS7.4AI score0.05182EPSS
SaveExploits1References24
Tenable Nessus
Tenable Nessus
added 2020/06/25 12:00 a.m.32 views

Microsoft SharePoint Server 2016 < 16.0.5017.1001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...

8.8CVSS7.9AI score0.69303EPSS
SaveExploits0References24
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.17 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS7.5AI score0.0313EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/09 8:15 p.m.3 views

CVE-2020-1320

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...

5.4CVSS6.3AI score0.01526EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.3 views

CVE-2020-1318

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...

5.4CVSS6.3AI score0.01488EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.2 views

CVE-2020-1298

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...

5.4CVSS6.3AI score0.01526EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.3 views

CVE-2020-1297

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1298...

5.4CVSS6.3AI score0.01488EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.7 views

CVE-2020-1289

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1148...

5.4CVSS6.5AI score0.01456EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.8 views

CVE-2020-1181

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

8.8CVSS7.9AI score0.69303EPSS
SaveExploits0References2
NVD
NVD
added 2020/06/09 8:15 p.m.30 views

CVE-2020-1181

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

8.8CVSS0.69303EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/09 8:15 p.m.3 views

CVE-2020-1183

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1297, CVE-2020-1298...

5.4CVSS6.3AI score0.01488EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/09 8:15 p.m.17 views

CVE-2020-1178

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'...

8.8CVSS0.0313EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/09 8:15 p.m.20 views

CVE-2020-1177

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298...

5.4CVSS0.01488EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.5 views

CVE-2020-1178

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'...

8.8CVSS7.3AI score0.0313EPSS
SaveExploits0References1
Rows per page
Query Builder