10158 matches found
CVE-2024-38024: Deserialization of Untrusted Data
Microsoft SharePoint Server Remote Code Execution Vulnerability...
Microsoft SharePoint 安全漏洞
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...
PT-2024-4802
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient server-side request validation, allowing a remote attacker to disclose protected information. There is no information provided about...
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Security Updates for Microsoft SharePoint Server 2019 (July 2024)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server 2016 (July 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...
PT-2024-4730
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A flaw in Microsoft SharePoint Server may allow attackers to execute code remotely and compromise the system. The issue stems from deficiencies in the deserialization...
CVE-2024-32987: Server-Side Request Forgery (SSRF)
Microsoft SharePoint Server Information Disclosure Vulnerability...
KLA70407 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint...
CVE-2024-34400
An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS...
CVE-2024-34400: Undefined Security Weakness
An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS...
CVE-2024-34400
VirtoSoftware Virto Kanban Board Web Part versions prior to 5.3.5.1 for SharePoint 2019 are vulnerable to a Cross-Site Scripting (XSS) issue. The flaw exists within the LinkTitle2 parameter of the /_layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx API endpoint. This vulnerability allows for...
PT-2024-25858 · Virtosoftware +1 · Virto Kanban Board Web Part +1
Name of the Vulnerable Software and Affected Versions: VirtoSoftware Virto Kanban Board Web Part versions prior to 5.3.5.1 for SharePoint 2019 Description: An issue was discovered in the software, specifically with the "/ layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx" API endpoint, where...
CVE-2024-34400
An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS...
CVE-2024-34400
An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS...
CVE-2024-33879
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter...
CVE-2024-33881
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter...
CVE-2024-33879
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter...