Lucene search
+L

9026 matches found

Veeam
Veeam
added 2018/12/28 12:00 a.m.20 views

Veeam Backup for Microsoft 365 v2 cumulative patch KB2809

Challenge Veeam Backup for Microsoft 365 v2 cumulative patch KB2809. Cause Please confirm you are running Veeam Backup for Microsoft 365 version 2.0.0.567 or 2.0.0.594 see KB2765 for more details prior to installing this cumulative patch KB2809. You can check the product version under Help About ...

6.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.15 views

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

5.4CVSS6.2AI score0.02256EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing a perpetrator to execute arbitrary code on the server.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server through a specially created page...

6.3CVSS8.1AI score0.06127EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.18 views

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

5.4CVSS6.2AI score0.02256EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.12 views

The vulnerability of the Microsoft SharePoint software lies in the lack of measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Microsoft SharePoint package exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges, using a specially crafted request to the...

3.5CVSS6AI score0.0158EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/12/14 12:00 a.m.174 views

Security Updates for Microsoft Sharepoint Server (December 2018)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which...

9.3CVSS7.4AI score0.15897EPSS
SaveExploits0References11
NVD
NVD
added 2018/12/12 3:29 p.m.38 views

CVE-2018-8650

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint...

5.4CVSS4.5AI score0.0158EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/12 3:29 p.m.29 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint...

3.5CVSS5.2AI score0.0158EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/12/12 3:29 p.m.11 views

CVE-2018-8650

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint...

5.4CVSS5.8AI score0.0158EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/12/12 2:00 p.m.12 views

CVE-2018-8650

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint...

5.1AI score0.0158EPSS
SaveExploits0References2
CVE
CVE
added 2018/12/12 2:00 p.m.80 views

CVE-2018-8650

CVE-2018-8650 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server, caused by improper sanitization of specially crafted web requests. The issue affects on‑premises SharePoint Server products (e.g., SharePoint Server 2013/2016/Enterprise Server variants and related ...

5.4CVSS4.2AI score0.0158EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/12/12 2:00 p.m.43 views

CVE-2018-8650

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint...

4.4AI score0.0158EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/12 12:29 a.m.9 views

CVE-2018-8635

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,...

8.8CVSS5.8AI score0.06127EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/12 12:29 a.m.12 views

CVE-2018-8628

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint...

7.8CVSS6.4AI score0.15897EPSS
SaveExploits0References2
NVD
NVD
added 2018/12/12 12:29 a.m.32 views

CVE-2018-8635

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,...

8.8CVSS6.4AI score0.06127EPSS
SaveExploits0References2
NVD
NVD
added 2018/12/12 12:29 a.m.26 views

CVE-2018-8628

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint...

9.3CVSS6.3AI score0.15897EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/12 12:29 a.m.30 views

Remote code execution

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint...

9.3CVSS7.9AI score0.15897EPSS
SaveExploits0References2Affected Software6
NVD
NVD
added 2018/12/12 12:29 a.m.21 views

CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microso...

4.3CVSS4.1AI score0.04425EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/12 12:29 a.m.25 views

Information disclosure

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microso...

4.3CVSS4.2AI score0.04425EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.5 views

CVE-2018-8635

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,...

8.8CVSS5.6AI score0.06127EPSS
SaveExploits0References3
Rows per page
Query Builder