10202 matches found
PT-2022-1709
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to a deserialization mechanism flaw in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code by exploiting this...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2022-2757 · Microsoft · Sharepoint Server +2
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using specially...
Security Bulletin: Vulnerability in Apache Log4j affects Content Collector for Microsoft SharePoint (CVE-2021-45105)
Summary Apache Log4j open source library is used by Content Collector for Microsoft SharePoint. This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the...
Microsoft SharePoint Server-Side Control Improper Input Validation Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of server-side controls. An unsafe server-side control can be instantiated...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-59594)
Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. Microsoft SharePoint Server is vulnerable to a remote code execution vulnerability that could be exploited to execute arbitrary code on the system...
First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...
Security Updates for Microsoft SharePoint Server 2019 (January 2022)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21837,CVE-2022-21840...
Microsoft SharePoint Foundation Code Execution
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Microsoft SharePoint Execution Code
The vulnerability of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server implementations is related to the ability to restore a random type of .NET object by adding the SetVariableActivity...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted request...
Security Updates for Microsoft SharePoint Server 2016 (January 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21837, CVE-2022-21840,...
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server 2013 (January 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21840, CVE-2022-21837...
Microsoft & Adobe Patch Tuesday (January 2022) – Microsoft 126 Vulnerabilities with 9 Critical, Adobe 41 Vulnerabilities, 22 critical
Microsoft Patch Tuesday – January 2022 Microsoft patched 126 vulnerabilities in their January 2022 Patch Tuesday release. Out of these, nine are rated as critical severity. As of this writing, none of the 126 vulnerabilities are known to be actively exploited. Microsoft has fixed problems in thei...
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability...
