Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

KLA73225 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation ...

Microsoft SharePoint 命令注入漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

CVE-2024-38228: Improper Neutralization of Special Elements used in a Command

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-43466: Deserialization of Untrusted Data

Microsoft SharePoint Server Denial of Service Vulnerability...

CVE-2024-38227: Improper Neutralization of Special Elements used in a Command

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-43464: Deserialization of Untrusted Data

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-38018: Deserialization of Untrusted Data

Microsoft SharePoint Server Remote Code Execution Vulnerability...

PT-2024-6284

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is a remote code execution flaw in Microsoft SharePoint Server. The root cause is a weakness in the deserialization mechanism. Successful exploitation allows a...

PT-2024-6366

Name of the Vulnerable Software and Affected Versions MindsDB versions 23.10.5.0 through 24.7.4.1 Description An arbitrary code execution issue exists when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, a specially crafted INSERT...

PT-2024-6367 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: MindsDB versions 23.10.5.0 through 24.7.4.1 Description: An arbitrary code execution issue exists when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, a specially crafted...

PT-2024-6303

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to the deserialization of untrusted data in Microsoft SharePoint Server, which can lead to a denial-of-service condition. This can be exploited by a...

Microsoft SharePoint SPAutoSerializingObject Deserialization of Untrusted Data Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPAutoSerializingObject class. The issue results from the lack of...

Microsoft SharePoint SPThemes Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of serialized instances of the SPThemes class. The issue results from the...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or...

Security Updates for Microsoft SharePoint Server 2019 (September 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application...

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2024-20918, CVE-2024-20921 and CVE-2023-33850 were disclosed in the Oracle 2024 Critical Patch Update. Vulnerability Details CVEID:CVE-2024-20918 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentialit...

VulnCheck KEV: CVE-2022-22005

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Microsoft SharePoint Server Spoofing

The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks remotely...

Microsoft SharePoint Server Deserialization RCE

The vulnerability of the Microsoft SharePoint Server software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading a specially crafted file remotely...