8952 matches found
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38094link is external link is externalMicrosoft SharePoint Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2024-44526)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
VulnCheck KEV: CVE-2024-38094
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks
Microsoft is warning of cyber attack campaigns that abuse legitimate file hosting services such as SharePoint, OneDrive, and Dropbox that are widely used in enterprise environments as a defense evasion tactic. The end goal of the campaigns are broad and varied, allowing threat actors to compromis...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
CVE-2024-43503 – Microsoft SharePoint Elevation of Privilege affects on‑premises SharePoint deployments (Server). The vulnerability is described as an elevation of privileges issue in SharePoint, enabling a local attacker with low privileges and no user interaction to escalate to high integrity/i...
CVE-2024-43503 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2024-43503 Microsoft SharePoint Elevation of Privilege Vulnerability
...
Microsoft SharePoint Elevation of Privilege Vulnerability
...
Description of the security update for SharePoint Server 2019: October 8, 2024 (KB5002647)
None None...
Description of the security update for SharePoint Enterprise Server 2016: October 8, 2024 (KB5002645)
None None...
Description of the security update for SharePoint Server Subscription Edition: October 8, 2024 (KB5002649)
None None...
Security Updates for Microsoft SharePoint Server 2016 (October 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208293;...
Microsoft SharePoint 访问控制错误漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
PT-2024-6761
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint, which can be exploited to elevate privileges. This allows an attacker to affect the system. There i...
Security Updates for Microsoft SharePoint Server 2019 (October 2024)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208291;...