8860 matches found
[Watcher] passive Web-security scanner
Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...
Microsoft SharePoint code execution
It's possible to executed code via SharePoint page content...
Microsoft Office security vulnerabilities
Informatio leakage on Sharepoint files access, Microsoft Office Shared Component information leakage...
CVE-2013-5059
Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."...
Design/Logic Flaw
Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."...
CVE-2013-5059
The CVE-2013-5059 entry corresponds to remote code execution in Microsoft SharePoint Server components (SharePoint Server 2010 SP1/SP2, 2013, and Office Web Apps 2013) via crafted page content. Connected sources (OPENVAS NASLs) describe multiple SharePoint-related RCE vulnerabilities (MS13-100) a...
MS13-100: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2904244)
The versions of Office SharePoint Server, or Office Web Apps installed on the remote host are affected by code execution vulnerabilities. By sending specially crafted page content to a SharePoint server, a remote, authenticated attacker could execute arbitrary code on the remote host subject to t...
Microsoft Office Information Disclosure Vulnerability (2909976)
This host is missing an important security update according to Microsoft Bulletin MS13-104. OpenVAS Vulnerability Test $Id: secpodms13-104.nasl 6125 2017-05-15 09:03:42Z teissa $ Microsoft Office Information Disclosure Vulnerability 2909976 Authors: Antu Sanadi Copyright: Copyright C 2013 SecPod,...
CVE-2013-5059
Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."...
Microsoft Office Information Disclosure Vulnerability (2909976)
This host is missing an important security update according to Microsoft Bulletin MS13-104. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-100: Vulnerabilities in Microsoft SharePoint Server could allow remote code execution: December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint Server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
Microsoft Releases December 2013 Security Bulletin
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Microsoft Office, Microsoft Lync, Internet Explorer, Microsoft Exchange, Microsoft SharePoint, and Microsoft Developer Tools as part of the Microsoft Security Bulletin Summary for December 2013. These vulnerabilities...
Microsoft SharePoint CVE-2013-5059 Multiple Remote Code Execution Vulnerabilities
Description Microsoft SharePoint is prone to multiple remote code-execution vulnerabilities. An attacker can leverage these issues to execute arbitrary code in the context of the W3WP service account user. Technologies Affected Microsoft Office Web Apps 2013 Microsoft SharePoint Server 2010 SP1...
MS13-100: Description of the security update for Office Web Apps Server: December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS13-100: Description of the security update for SharePoint Server 2013 (coreserverloc): December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
October 2013 Security Bulletin Webcast, Q&A, and Slide Deck
Today we’re publishing the October 2013 Security Bulletin Webcast Questions & Answers page. We fielded 11 questions during the webcast, with specific bulletin questions focusing primarily on the SharePoint MS13-084 and Kernel-Mode Drivers MS13-081 bulletins. There was one additional question that...
CVE-2013-3889
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute...
CVE-2013-3895
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."...
Memory corruption
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute...
Code injection
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."...