Lucene search
+L

9021 matches found

Check Point Advisories
Check Point Advisories
added 2021/02/09 12:00 a.m.18 views

Microsoft SharePoint Server Remote Code Execution (CVE-2021-24072)

A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS8.8AI score0.02249EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.21 views

Microsoft SharePoint 安全漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. A remote code execution vulnerability exists in Microsoft SharePoint, which can be exploited by a remote attacker to execute arbitrary code in the context of the application...

8.8CVSS8.1AI score0.02249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.14 views

Microsoft SharePoint 信息泄露漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. An information disclosure vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to submit a special request and obtain sensitive information...

6.5CVSS6AI score0.0253EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.13 views

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS8AI score0.05904EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/02/08 12:00 a.m.6 views

PT-2021-3088 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The vulnerability in Microsoft SharePoint Server is related to insufficient input sanitization, allowing a remote attacker to execute arbitrary code. In a network-based...

9CVSS7.7AI score0.51049EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2021/02/08 12:00 a.m.10 views

PT-2021-3099 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft SharePoint components, specifically Web Parts. This can be exploited by a remote attacker to execute...

10CVSS8.5AI score0.30045EPSS
SaveExploits5References13
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.18 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

5.8CVSS5.5AI score0.01828EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.17 views

The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server arises from insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this...

7.3CVSS7.5AI score0.036EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.13 views

The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server relates to writing outside the buffer, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to buffer overflow attacks. Exploiting this vulnerability can allow...

7.3CVSS7.8AI score0.036EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.30 views

The vulnerability of Microsoft Excel, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps relates to insufficient input validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel, the Microsoft Office suite, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...

7.8CVSS7.5AI score0.03089EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to elevate their privileges and execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code...

8.5CVSS7.8AI score0.02219EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/04 4:41 p.m.48 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14779...

5.8CVSS0.8AI score0.03758EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/04 3:47 p.m.56 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14779...

5.8CVSS0.9AI score0.03758EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/04 3:46 p.m.39 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14779...

5.8CVSS1AI score0.03758EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/04 3:45 p.m.42 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14779...

5.8CVSS0.9AI score0.03758EPSS
SaveExploits0Affected Software1
ThreatPost
ThreatPost
added 2021/01/28 4:46 p.m.57 views

LogoKit Simplifies Office 365, SharePoint 'Login' Phishing Pages

A newly-uncovered phishing kit, dubbed LogoKit, eliminates headaches for cybercriminals by automatically pulling victims’ company logos onto the phishing login page. This gives attackers the tools needed to easily mimic company login pages, a task that can sometimes be complex. Cybercriminals hav...

SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server stems from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially crafted...

5.8CVSS5.5AI score0.01828EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.14 views

The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server are due to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.03579EPSS
SaveExploits0References3
Veeam
Veeam
added 2021/01/21 12:00 a.m.211 views

“Cannot change WebPart ExportMode to ‘All’. WebPart will be skipped” - Warning When Performing Backup of SharePoint Sites

Article Applicability This article is regarding an error that occurs only in Veeam Backup for Microsoft 365 build 8.05.20 and earlier. Starting in Veeam Backup for Microsoft 365 8.1 build 8.1.0.305, Classic Web Parts in Microsoft 365 organizations can be protected using modern app-only...

6.6AI score
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2021/01/21 12:00 a.m.12 views

VulnCheck KEV: CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects...

4.3CVSS6.6AI score0.04425EPSS
SaveExploits0References1
Rows per page
Query Builder