3588 matches found
CVE-2018-8572
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...
CVE-2018-8539
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573...
CVE-2018-8568
The CVE-2018-8568/8572 family concerns Microsoft SharePoint Server. A vulnerability exists where SharePoint does not properly sanitize/filter a specially crafted web request sent to an affected SharePoint server, enabling an authenticated attacker to elevate privileges. Affected products: Microso...
CVE-2018-8568
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...
CVE-2018-8539
CVE-2018-8539 is a remote code execution vulnerability in Microsoft Word (affecting Word, Office, and SharePoint) caused by improper handling of objects in memory. The root cause is memory object handling defects that allow an attacker to trigger code execution in the security context of the curr...
CVE-2018-8572
CVE-2018-8572 affects Microsoft SharePoint, specifically SharePoint Server and SharePoint. The vulnerability arises because the server does not properly sanitize/filter a specially crafted web request, enabling an authenticated attacker to elevate privileges on the affected SharePoint Server. Con...
Description of the security update for SharePoint Server 2019: November 13, 2018
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: November 13, 2018
Description of the security update for SharePoint Server 2010 Office Web Apps: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Description of the security update for SharePoint Server 2010: November 13, 2018
Description of the security update for SharePoint Server 2010: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...
Description of the security update for SharePoint Server 2010: November 13, 2018
Description of the security update for SharePoint Server 2010: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...
Security Updates for Microsoft SharePoint Server (November 2018)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacke...
Microsoft SharePoint Server CVE-2018-8568 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Microsoft SharePoint Server CVE-2018-8572 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
PT-2018-18584 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting...
PT-2018-18587 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. This could allow an attacker to...
Microsoft SharePoint Server CVE-2018-8578 Information Disclosure Vulnerability
Description Microsoft SharePoint Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Foundation 2013 SP1 Recommendations Run all software as a...
U.S. Dept Of Defense: Padding Oracle ms10-070 in the a DoD website (https://██████/)
Hi there i found a Padding Oracle ms10-070 in the following website: https://█████████/ In the following steps i will demonstrate how to reproduce the vulnerability. POC: 1ºGo to the following url: https://████/ you will see in the source code off the page something like "WebResource.axd?d="...
The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to execute cross-site scripting attacks with elevated privileges.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges using specially crafted requests...
The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...
The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...