8860 matches found
Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017
Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...
Description of the security update for SharePoint Server 2010: July 11, 2017
Description of the security update for SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Security Update for Microsoft Office Online Server and SharePoint Server 2010 Office Web Apps (July 2017)
The Microsoft Office Online Server or SharePoint Server 2010 Office Web Apps installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote...
Microsoft Office CVE-2017-8501 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
KLA11069 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to improper handling of...
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...
Security Update for Microsoft SharePoint Server and Project Server (July 2017)
The Microsoft SharePoint Server or Project Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office due to improper handling of objects in memory. An...
Microsoft Office 365 Enterprise E3 Insufficient Session Expiration Vulnerability
Microsoft Office 365 Enterprise E3 suffers from an insufficient session expiration vulnerability. Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration...
Microsoft Office 365 Enterprise E3 Insufficient Session Expiration
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2017-011 Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration CWE-613 Risk Level: Low...
The vulnerability of the Microsoft Office software suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps software suite allows a perpetrator to execute arbitrary code.
The vulnerabilities of the Microsoft Office suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps suite are related to improper access to objects in memory...
The vulnerabilities of the Microsoft Office suite of programs, the Microsoft OneNote note-taking software, the Microsoft Word text editor, the Office Web Apps Server network software, the Microsoft SharePoint Server network software, the Microsoft Office Web Apps suite of programs, and the Microsoft Office Compatibility Pack allow a perpetrator to execute arbitrary code.
Vulnerabilities of the Microsoft Office suite of programs, the Microsoft OneNote note-taking software, the Microsoft Word text editor, the Office Web Apps Server web application, the Microsoft SharePoint Server web application, and the Microsoft Office Web Apps suite are related to improper acces...
The vulnerability of the Microsoft Office software suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps software suite allows a perpetrator to execute arbitrary code.
The vulnerabilities of the Microsoft Office suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps suite are related to improper access to objects in memory...
Microsoft Malware Protection Engine < 1.1.13903 RCE
The version of Microsoft Malware Protection Engine MMPE installed on the remote Windows host is prior to 1.1.13903.0. It is, therefore, affected by a remote code execution vulnerability due to improper handling of files during scanning. An unauthenticated, remote attacker can exploit this, via a...
Microsoft Project Server 2013 XSS Vulnerability (KB3203399)
This host is missing an important security update according to Microsoft KB3203399 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-8551
An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...
CVE-2017-8551
An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...
CVE-2017-8514
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...
CVE-2017-8514
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...
Information disclosure
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...