Lucene search
+L

200 matches found

Tenable Nessus
Tenable Nessus
added 2024/09/10 12:00 a.m.27 views

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or...

8.8CVSS6.7AI score0.51461EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/07/15 12:00 a.m.19 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.3CVSS8.5AI score0.50892EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/06/11 12:00 a.m.29 views

Security Updates for Microsoft SharePoint Server Subscription Edition (June 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a local code execution vulnerability. An attacker can exploit this with a specially crafted file to bypass authentication and execute unauthorized...

7.8CVSS6.5AI score0.01182EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.19 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their susceptibility to corruption of unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially creat...

9CVSS6AI score0.8399EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/05/16 6:19 a.m.27 views

Insecure Direct Object Reference (IDOR)

org.bonitasoft.engine, bonita-server is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to the absence of dynamic permissions, which previously existed only in the Subscription edition and were not customizable in the Community edition...

6.5CVSS6.8AI score0.00318EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/05/15 12:00 a.m.43 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.8AI score0.00318EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/15 12:00 a.m.15 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9AI score0.00318EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2024/05/14 7:00 a.m.53 views

Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)

None None...

7.5CVSS6.8AI score0.8399EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/05/14 12:00 a.m.45 views

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...

7.5CVSS6.5AI score0.8399EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:00 a.m.48 views

Security Updates for Microsoft SharePoint Server Subscription Edition (April 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing a security update. It is, therefore, affected by a session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C...

6.8CVSS8.2AI score0.01395EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.16 views

The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.03901EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/15 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

9CVSS8.1AI score0.30801EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2024/01/09 8:00 a.m.67 views

Description of the security update for SharePoint Server Subscription Edition: January 9, 2024 (KB5002540)

None None...

8.8CVSS7AI score0.30801EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/01/09 12:00 a.m.46 views

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized...

8.8CVSS8.9AI score0.30801EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2023/09/12 7:00 a.m.41 views

Description of the security update for SharePoint Server Subscription Edition: September 12, 2023 (KB5002474)

None None...

8.8CVSS7AI score0.02254EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

9CVSS8.2AI score0.04316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.3 views

PT-2023-3908 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

10CVSS9.3AI score0.013EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2023/07/11 12:00 a.m.54 views

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...

8.8CVSS8.7AI score0.40644EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/06/20 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

7.5CVSS6.9AI score0.00882EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/20 12:00 a.m.8 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages lies in their lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

6.8CVSS6.9AI score0.01022EPSS
SaveExploits0References2
Rows per page
Query Builder