10120 matches found
PT-2024-6761
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint, which can be exploited to elevate privileges. This allows an attacker to affect the system. There i...
Security Updates for Microsoft SharePoint Server Subscription Edition (October 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2024-43503: Improper Access Control
Microsoft SharePoint Elevation of Privilege Vulnerability...
KLA73908 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Office c...
Security Updates for Microsoft SharePoint Server 2016 (October 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208293;...
Security Updates for Microsoft SharePoint Server 2019 (October 2024)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208291;...
Microsoft SharePoint 访问控制错误漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading a specially crafted file remotely...
The vulnerability of the Microsoft SharePoint Server software, related to deserialization of unreliable data, allows a attacker to trigger a service failure.
The vulnerability of the Microsoft SharePoint Server software relates to the deserialization of unreliable data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading a specially crafted file remotely...
The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
Eval Injection
MindsDB is vulnerable to Eval Injection. The vulnerability is due to unsanitized input in the Microsoft SharePoint integration, where a specially crafted 'INSERT' query for site column creation allows Python code to be passed to an eval function and executed on the server...
Fortinet Confirms Limited Data Breach After Hacker Leaks 440 GB of Data
A hacker claims to have stolen 440 GB of data from cybersecurity firm Fortinet, exploiting an Azure SharePoint…...
Eval Injection
MindsDB is vulnerable to Eval Injection. The vulnerability is due to unsanitized input in the Microsoft SharePoint integration within sharepointapi.py, where a specially crafted 'INSERT' query containing Python code is passed to the eval function, allowing an attacker to execute arbitrary code on...
GHSA-WF9G-C67G-H4CH MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list item creation. If such a...
MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query i...
GHSA-V6G6-3CM3-VF6C MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for site column creation. If such a...
MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for site column creation. If such a...
GHSA-C85F-PCX6-2GHM MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query i...