9026 matches found
PT-2019-1447
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint versions prior to the fixed version Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Microsoft SharePoint Server 2010, 2019 Description A remote code execution vulnerability exists in...
Microsoft SharePoint EntityInstanceIdEncoder Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the EntityInstanceIdEncoder class. The issue results from the lack of proper validati...
Microsoft SharePoint Server CVE-2019-0670 Spoofing Vulnerability
Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...
Microsoft SharePoint Server CVE-2019-0594 Remote Code Execution Vulnerability
Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...
Microsoft SharePoint BDC Import Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the Business Data Connectivity Service Application. The issue results from the lack o...
PT-2019-1402 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: A remote code execution issue exis...
Microsoft SharePoint Server CVE-2019-0604 Remote Code Execution Vulnerability
Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...
The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a intruder to disclose protected information.
The vulnerability of the Microsoft SharePoint Enterprise Server package is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information by viewing the path to the script directory uploaded to the page...
Vulnerabilities of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365, related to memory object processing errors, allow attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365 exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests to the vulnerable...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...
The vulnerability of the SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the SharePoint Server software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable SharePoint server...
The vulnerability of the Microsoft SharePoint Enterprise Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges.
The vulnerability of the Microsoft SharePoint Enterprise Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially crafted request...
Microsoft Patch Tuesday — January 2019 Security Updates Released
Microsoft has issued its first Patch Tuesday for this year to address 49 CVE-listed security vulnerabilities in its Windows operating systems and other products, 7 of which are rated critical, 40 important and 2 moderate in severity. Just one of the security vulnerabilities patched by the tech...
Microsoft SharePoint Enterprise Server 2016 Cross-Site Scripting Vulnerability
Microsoft SharePoint Enterprise Server 2016 is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for...
Microsoft Office SharePoint Server 2016 - Denial of Service Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...
Microsoft Office SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-16199 )
Microsoft Office is an office software suite developed by Microsoft Corporation.Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform. A cross-site scripting vulnerability exists in Microsoft Office SharePoint, which arises from a failure of the program to proper...
Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2019-16186)
Microsoft SharePoint Enterprise Server 2013 SP1 is a set of enterprise business collaboration platforms from Microsoft for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and information. A...
Microsoft Office SharePoint Server 2016 Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...