CVE-2018-8578

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint...

CVE-2018-8498

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft SharePoint elevation of privilege vulnerability (CNVD-2018-08794)

SharePoint is a free add-on value-added software for Windows Server 2003 made by Microsoft that provides basic portal and corporate intranet functionality. An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2018-08793)

SharePoint is a free add-on value-added software for Windows Server 2003 made by Microsoft that provides basic portal and corporate intranet functionality. An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker could exploit the vulnerability to redirect users accessi...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2018-08795)

SharePoint is a free add-on value-added software for Windows Server 2003 made by Microsoft that provides basic portal and corporate intranet functionality. An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially...

Privilege escalation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2017-11826

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...

CVE-2017-8514

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...

The vulnerability of Microsoft SharePoint’s electronic document management system, which allows a malicious individual to increase their privileges

Microsoft SharePoint software contains a vulnerability related to improper filtering of specially crafted requests sent to the server. Exploiting this vulnerability allows a malicious actor to elevate their privileges by sending specially crafted requests to the vulnerable SharePoint server,...

The vulnerability of Microsoft SharePoint software allows a remote attacker to compromise protected information.

There is a vulnerability in Microsoft SharePoint Server that allows for an increase in privileges levels. Exploiting this vulnerability enables a perpetrator to execute cross-site scripts on a vulnerable system and to run scripts within the context of authorized user security...

The vulnerability of Microsoft Word text editor, Office Web Apps Server web server, programs for reading Word Viewer doc files, Microsoft SharePoint Server corporate application suite, Microsoft Office software suite, Microsoft Office Compatibility Pack suite, which allows a hacker to execute arbitrary code.

The vulnerabilities of Microsoft Word text editor, Office Web Apps Server web server, Word Viewer document-reading programs, Microsoft SharePoint Server corporate application suite, Microsoft Office software suite, and the Microsoft Office Compatibility Pack suite are caused by buffer overflow...

Unspecified Arbitrary Code Execution Vulnerability in Microsoft SharePoint

Microsoft Silverlight is a cross-browser, cross-platform plug-in that brings the next generation of .NETFramework-based media experiences and rich interactive applications to the Web. A security vulnerability exists in Microsoft SharePoint, where the program fails to properly validate special pag...

Microsoft SharePoint 2007 / 2010 URL Redirect

Seeker Research Center Security Advisory This vulnerability was discovered by Seekerr Automatic Run-Time Application Security Testing Solution Disclosed By Irene Abezgauz, September 13th, 2011 ========= I. Overview ========= An Insecure Redirect vulnerability has been identified in Microsoft...

SharePoint server cross site scripting vulnerability

Exploit for unknown platform in category web applications ==================================================== SharePoint server cross site scripting vulnerability ==================================================== =========== I. Overview =========== During a penetration test performed by...

Security Update for Microsoft Office SharePoint Server 2007 (KB2596670) 64-Bit Edition

A security vulnerability exists in Microsoft Office SharePoint Server 2007 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...