Lucene search
+L

10161 matches found

CISA
CISA
•added 2024/03/26 12:00 p.m.•28 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

7.2CVSS9.9AI score0.84974EPSS
SaveIn wildExploits7References6
VulnCheck KEV
VulnCheck KEV
•added 2024/03/26 12:00 a.m.•7 views

VulnCheck KEV: CVE-2023-24955

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely...

7.2CVSS7.6AI score0.84974EPSS
SaveIn wildExploits7References8
CISA KEV Catalog
CISA KEV Catalog
•added 2024/03/26 12:00 a.m.•101 views

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely...

7.2CVSS7.3AI score0.84974EPSS
SaveIn wildExploits7
BDU FSTEC
BDU FSTEC
•added 2024/03/22 12:00 a.m.•25 views

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.03901EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/03/14 12:00 a.m.•25 views

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39677)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

7.8CVSS7.9AI score0.03901EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
•added 2024/03/12 7:47 p.m.•153 views

Patch Tuesday - March 2024

Microsoft is addressing 60 vulnerabilities this March 2024 Patch Tuesday. Microsoft indicated that they aren’t aware of prior public disclosure or exploitation in the wild for any of the vulnerabilities patched today, which means no new additions to CISA KEV at time of writing. Microsoft is...

7.5CVSS7.5AI score0.30285EPSS
SaveExploits3
NVD
NVD
•added 2024/03/12 5:15 p.m.•25 views

CVE-2024-21426

Microsoft SharePoint Server Remote Code Execution Vulnerability...

7.8CVSS7.7AI score0.03901EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/03/12 5:15 p.m.•7 views

CVE-2024-21426

Microsoft SharePoint Server Remote Code Execution Vulnerability...

7.8CVSS5.9AI score0.03901EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/12 5:15 p.m.•33 views

Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability...

4.4CVSS7.6AI score0.03901EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/12 4:57 p.m.•309 views

CVE-2024-21426

CVE-2024-21426 is a Microsoft SharePoint Server remote code execution vulnerability. Publicly documented impact affects multiple SharePoint products, including SharePoint Server 2019, SharePoint Server Subscription Edition, SharePoint Enterprise Server 2016, and related on-premises deployments. R...

7.8CVSS7.7AI score0.03901EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/12 4:57 p.m.•40 views

CVE-2024-21426 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

7.8CVSS6.8AI score0.03901EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/12 4:57 p.m.•64 views

CVE-2024-21426 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

7.8CVSS7.8AI score0.03901EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/03/12 7:00 a.m.•73 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

7.8CVSS7.1AI score0.03901EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/03/12 7:00 a.m.•57 views

Description of the security update for SharePoint Enterprise Server 2016: March 12, 2024 (KB5002559)

None None...

7.8CVSS7AI score0.03901EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/03/12 7:00 a.m.•73 views

Description of the security update for SharePoint Server Subscription Edition: March 12, 2024 (KB5002564)

None None...

7.8CVSS7.2AI score0.03901EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/03/12 7:00 a.m.•51 views

Description of the security update for SharePoint Server 2019: March 12, 2024 (KB5002562)

None None...

7.8CVSS7AI score0.03901EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/03/12 12:00 a.m.•21 views

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

7.8CVSS8.2AI score0.03901EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•36 views

Security Updates for Microsoft SharePoint Server 2019 (March 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

7.8CVSS8.8AI score0.03901EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•4 views

CVE-2024-21426: Use After Free

Microsoft SharePoint Server Remote Code Execution Vulnerability...

7.8CVSS5.8AI score0.03901EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•37 views

Security Updates for Microsoft SharePoint Server 2016 (March 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing a security update. It is, therefore, affected by A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C Tenable,...

7.8CVSS8.8AI score0.03901EPSS
SaveExploits0References2
Rows per page
Query Builder