Microsoft Office SharePoint Cross-Site Scripting Vulnerability (CNVD-2021-24039)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-64011)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-64013)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-35936)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

CVE-2020-1327

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'...

CVE-2020-1327

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'...

CVE-2020-1183

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1297, CVE-2020-1298...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft SharePoint Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

Security Updates for Microsoft SharePoint Server (June 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing. CVE-2020-1323 - An elevation of privilege vulnerabilit...

D-Link DIR-865L Cross-Site Request Forgery Vulnerability (CNVD-2020-33172)

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which originates from the program failing to properly validate user input. A remote attacker could exploit this vulnerabilit...

CVE-2020-3229

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

The vulnerability of the configuration for connecting microprogramming software-based Cisco IP phones to web servers allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the configuration for connecting microprogrammed IP telephones to web servers is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure by using a specially created HTTP...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Loan Loss Forecasting and Provisioning component in the banking analytical system’s simulation model of Oracle Financial Services Applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Loan Loss Forecasting and Provisioning component in the banking analytical system’s simulation model involves a lack of protection for operational data. Exploiting this vulnerability allows an attacker to creat...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Funds Transfer Pricing banking analysis system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Funds Transfer Pricing banking analysis system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to create,...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Asset Liability Management banking analytics system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Asset Liability Management banking analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to create, delet...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Price Creation and Discovery component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Price Creation and Discovery component in the bank analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete,...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Liquidity Risk Measurement and Management banking analytics system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Liquidity Risk Measurement and Management banking analytics system’s simulation model applications is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacke...

The vulnerability of the Oracle Hospitality Reporting and Analytics component of the Oracle Food and Beverage Applications software package allows a perpetrator to compromise the confidentiality and integrity of protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the...