Lucene search
+L

8942 matches found

Microsoft CVE
Microsoft CVE
added 2020/06/09 7:00 a.m.25 views

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS0.9AI score0.01526EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/06/09 7:00 a.m.36 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker who successfully exploited this vulnerability could attempt to impersonate another user of the SharePoint server. To exploit this vulnerability, an authenticated attacker would send a specially crafted request to ...

8.8CVSS4AI score0.02957EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/06/09 7:00 a.m.89 views

Microsoft SharePoint Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

5.4CVSS0.8AI score0.01402EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/06/09 7:00 a.m.26 views

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS0.9AI score0.01488EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.4 views

PT-2020-3406 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...

5.4CVSS7.7AI score0.01488EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.6 views

PT-2020-3556 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site-scripting XSS issue...

5.4CVSS7.5AI score0.01526EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.8 views

PT-2020-2849 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a special...

5.4CVSS7.5AI score0.01526EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.4 views

PT-2020-2943 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...

5.4CVSS7.8AI score0.01488EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.3 views

PT-2020-2850 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site-scripting XSS issue...

5.4CVSS7.7AI score0.01488EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2020/06/09 12:00 a.m.45 views

CVE-2020-1295 Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker who successfully exploited this vulnerability could attempt to impersonate another user of the SharePoint server. To exploit this vulnerability, an authenticated attacker would send a specially crafted request to ...

8.8CVSS7.7AI score0.02957EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/06/09 12:00 a.m.38 views

Microsoft SharePoint Server Web Part Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of Web Parts. When creating a SharePoint page, an attacker can uplo...

8.8CVSS2.4AI score0.69303EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2020/06/09 12:00 a.m.107 views

KLA11808 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A...

9.3CVSS8.8AI score0.69303EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.6 views

PT-2020-2945 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...

5.4CVSS7.6AI score0.01488EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:00 a.m.75 views

Security Updates for Microsoft SharePoint Server (June 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing. CVE-2020-1323 - An elevation of privilege vulnerabilit...

8.8CVSS7.1AI score0.69303EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01666EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted web pages...

9CVSS7.7AI score0.0398EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.9 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their improper handling of queries, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to improper handling of requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.8AI score0.0238EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01712EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01489EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS5.9AI score0.03984EPSS
SaveExploits1References3
Rows per page
Query Builder