3176 matches found
Microsoft SharePoint Server XML Rollup Information Disclosure (MS11-074; CVE-2011-1892)
An information disclosure vulnerability has been reported in Microsoft SharePoint Server. The vulnerability is due to improper handling of malicious XML classes by SharePoint. An attacker could trigger this flaw by loading a malicious XML file to content rollup in an affected SharePoint server...
Preemptive Protection against Microsoft SharePoint Server Multiple Cross Site Scripting Vulnerabilities (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint 'EditForm.aspx' CVE-2011-1890 Script Injection Vulnerability
Description Microsoft SharePoint is prone to a script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...
Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability
Description Microsoft SharePoint is prone to a vulnerability that lets attackers access local files. An attacker can exploit this vulnerability to retrieve local files from a vulnerable computer in the context of the vulnerable service. Information obtained may aid in further attacks. Technologie...
Microsoft Share Point Calendar Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint CVE-2011-1893 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft SharePoint Contact Details Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft Share Point TextField_spSave Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
This host is missing a critical security update according to Microsoft Bulletin MS10-104 OpenVAS Vulnerability Test $Id: secpodms10-104.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft SharePoint Could Allow Remote Code Execution Vulnerability 2455005 Authors: Madhuri D Copyright: Copyright c 2010...
Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
This host is missing a critical security update according to Microsoft Bulletin MS10-104 SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS10-104: Vulnerability in Microsoft SharePoint Could Allow Remote Code Execution (2455005)
The version of SharePoint Server 2007 running on the remote host has a remote code execution vulnerability. The Document Conversions Launcher Service does not properly validate SOAP requests before processing them. A remote attacker could exploit this by submitting a specially crafted SOAP reques...
Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability
Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition. Technologies...
Microsoft SharePoint Server Arbitrary File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Sharepoint Server utilizing Microsoft's Office Document Load Balancer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Office Document...
Microsoft Groove Server Installed
Microsoft Groove Server is installed on the remote host. This application is used to centrally manage deployments of Microsoft Office Groove and Microsoft SharePoint Workspace. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49977; scriptversion"1.12";...
Microsoft Security Bulletin MS10-072 - Important Vulnerabilities in SafeHTML Could Allow Information Disclosure (2412048)
Microsoft Security Bulletin MS10-072 - Important Vulnerabilities in SafeHTML Could Allow Information Disclosure 2412048 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one privately reported...
Microsoft SharePoint Service Help.aspx 'tid' Parameter DoS
The version of Microsoft SharePoint Services running on the remote host has a denial of service vulnerability. Sending invalid data to the 'tid' parameter of 'help.aspx' can cause the application to hang. A remote attacker could exploit this by sending malicious requests, causing SharePoint to ha...
Microsoft SharePoint Services Help.aspx 'cid0' Parameter XSS
The version of Microsoft SharePoint Services running on the remote host has a cross-site scripting vulnerability. Input sent to the 'cid0' parameter of '/layouts/help.aspx' is not properly sanitized. A remote attacker could exploit this by tricking a user into making a malicious request, resultin...
Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
This host is missing a critical security update according to Microsoft Bulletin MS10-039. OpenVAS Vulnerability Test $Id: secpodms10-039.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft SharePoint Privilege Elevation Vulnerabilities 2028554 Authors: Madhuri D Copyright: Copyright c 2010 SecPod...
Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
This host is missing a critical security update according to Microsoft Bulletin MS10-039. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...