10146 matches found
CVE-2024-49068: Improper Access Control
Microsoft SharePoint Elevation of Privilege Vulnerability...
PT-2024-9502 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...
CVE-2024-49064: Improper Restriction of XML External Entity Reference
Microsoft SharePoint Information Disclosure Vulnerability...
CVE-2024-49070: Deserialization of Untrusted Data
Microsoft SharePoint Remote Code Execution Vulnerability...
Security Updates for Microsoft SharePoint Server 2019 (December 2024)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid212234;...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
KLA78027 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft SharePoint can ...
PT-2024-9358
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to a deserialization mechanism flaw in Microsoft SharePoint, allowing remote attackers to execute arbitrary code and affect the system. This can potentiall...
Security Updates for Microsoft SharePoint Server 2016 (December 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...
Microsoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the FindSpecific method. The process does not properly...
Defense-in-Depth Security Updates for Microsoft SharePoint Server 2016 (November 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211461;...
Defense-in-Depth Security Updates for Microsoft SharePoint Server 2019 (November 2024)
The Microsoft SharePoint Server 2019 installation is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211460; scriptversion"1.2";...
Defense-in-Depth Security Updates for Microsoft SharePoint Server Subscription Edition (November 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211459;...
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...
Microsoft SharePoint Server Defense in Depth Update
Microsoft has released a security update for Microsoft SharePoint Server. The update provides a defense in depth enhancement regarding redirections...
Description of the security update for SharePoint Server 2019: November 12, 2024 (KB5002650)
None None...
Description of the security update for SharePoint Server Subscription Edition: November 12, 2024 (KB5002651)
None None...
Description of the security update for SharePoint Enterprise Server 2016: November 12, 2024 (KB5002654)
None None...
