222 matches found
Microsoft SharePoint Server Memory Corruption Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially creat...
Insecure Direct Object Reference (IDOR)
org.bonitasoft.engine, bonita-server is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to the absence of dynamic permissions, which previously existed only in the Subscription edition and were not customizable in the Community edition...
CVE-2024-28087
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...
CVE-2024-28087
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...
Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)
None None...
Security Updates for Microsoft SharePoint Server Subscription Edition (May 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...
Security Updates for Microsoft SharePoint Server Subscription Edition (April 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing a security update. It is, therefore, affected by a session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
Description of the security update for SharePoint Server Subscription Edition: January 9, 2024 (KB5002540)
None None...
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2024)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized...
Description of the security update for SharePoint Server Subscription Edition: September 12, 2023 (KB5002474)
None None...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
PT-2023-3908 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...
Security Updates for Microsoft SharePoint Server Subscription Edition (June 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server elevation of privilege vulnerabilty. CVE-2023-33142 - A Sharepoint Server spoofing vulnerability...
PT-2023-3183 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...