8861 matches found
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Security Updates for Microsoft SharePoint Server Subscription Edition Language Pack (November 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing a language pack security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute...
CVE-2022-45910
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
CVE-2022-45910
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
Design/Logic Flaw
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
CVE-2022-45910
The CVE-2022-45910 entry corresponds to an LDAP Injection vulnerability in Apache ManifoldCF’s ActiveDirectory and Sharepoint ActiveDirectory connectors. The root cause is improper neutralization of special LDAP elements when username or domain strings are passed to the UserACLs servlet during us...
Apache ManifoldCF 注入漏洞
Apache ManifoldCF is an open source framework of the United States Apache Apache Foundation . It is used to connect a source content repository to a target repository or index. An injection vulnerability exists in Apache ManifoldCF version 2.23 and earlier, which stems from improper neutralizatio...
U.S. Dept Of Defense: Reflective Cross Site Scripting (XSS) on ███████/Pages
Summary: A reflection cross-site scripting XSS vulnerability was discovered in Microsoft SharePoint Server. The vulnerability was caused by improper sanitization of a web request to an affected SharePoint server. The vulnerability could have been exploited by an authenticated attacker to execute...
The vulnerability of the Microsoft SharePoint software package arises from insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft SharePoint software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server, which stems from the lack of data protection measures, allows attackers to gain unauthorized access to devices.
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized acce...
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server are due to insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in information representation errors in the user interface, which allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server relates to information display errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
Cross site scripting
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
Nintex Workflow plugin SharePoint 跨站脚本漏洞
Nintex Workflow plugin is a workflow designer plugin from Nintex Corporation, USA. A security vulnerability exists in Nintex Workflow plugin SharePoint version 5.2.2.30, which originates from a vulnerability that allows attackers to implement cross-site scripting...
