3086 matches found
Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)
This host is missing a critical security update according to Microsoft Bulletin MS10-104 SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS10-104: Vulnerability in Microsoft SharePoint Could Allow Remote Code Execution (2455005)
The version of SharePoint Server 2007 running on the remote host has a remote code execution vulnerability. The Document Conversions Launcher Service does not properly validate SOAP requests before processing them. A remote attacker could exploit this by submitting a specially crafted SOAP reques...
Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability
Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition. Technologies...
Microsoft SharePoint Server Arbitrary File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Sharepoint Server utilizing Microsoft's Office Document Load Balancer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Office Document...
Microsoft Groove Server Installed
Microsoft Groove Server is installed on the remote host. This application is used to centrally manage deployments of Microsoft Office Groove and Microsoft SharePoint Workspace. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49977; scriptversion"1.12";...
Microsoft Security Bulletin MS10-072 - Important Vulnerabilities in SafeHTML Could Allow Information Disclosure (2412048)
Microsoft Security Bulletin MS10-072 - Important Vulnerabilities in SafeHTML Could Allow Information Disclosure 2412048 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one privately reported...
Microsoft SharePoint Services Help.aspx 'cid0' Parameter XSS
The version of Microsoft SharePoint Services running on the remote host has a cross-site scripting vulnerability. Input sent to the 'cid0' parameter of '/layouts/help.aspx' is not properly sanitized. A remote attacker could exploit this by tricking a user into making a malicious request, resultin...
Microsoft SharePoint Service Help.aspx 'tid' Parameter DoS
The version of Microsoft SharePoint Services running on the remote host has a denial of service vulnerability. Sending invalid data to the 'tid' parameter of 'help.aspx' can cause the application to hang. A remote attacker could exploit this by sending malicious requests, causing SharePoint to ha...
Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
This host is missing a critical security update according to Microsoft Bulletin MS10-039. OpenVAS Vulnerability Test $Id: secpodms10-039.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft SharePoint Privilege Elevation Vulnerabilities 2028554 Authors: Madhuri D Copyright: Copyright c 2010 SecPod...
Microsoft SharePoint Privilege Elevation Vulnerabilities (2028554)
This host is missing a critical security update according to Microsoft Bulletin MS10-039. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft SharePoint multiple security vulnerabilities
Crossite scripting, information leak, DoS...
Microsoft SharePoint Help Page Remote Denial of Service Vulnerability
Description Microsoft SharePoint is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. Technologies Affected Avaya Meeting Exchange - Client Registration Server Avaya Meeting Exchange ...
Internet Explorer and SharePoint 'toStaticHTML' Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer and Microsoft SharePoint are prone to a cross-domain information-disclosure vulnerability because they fail to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another doma...
Microsoft SharePoint '_layouts/help.aspx' Cross Site Scripting Vulnerability
This host is running Microsoft SharePoint Server and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodmssharepointlayoutsxssvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Microsoft SharePoint 'layouts/help.aspx' Cross Site Scripting Vulnerability Authors: Antu...
CVE-2010-0817
Cross-site scripting XSS vulnerability in layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter...
CVE-2010-0817
Cross-site scripting XSS vulnerability in layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter...
Microsoft SharePoint Server 2007 - Cross-Site Scripting
Microsoft SharePoint Server 2007 - Cross-Site Scripting Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html http://www.microsoft.com/technet/security/advisory/983438.mspx Product: Microsoft SharePoint Server 2007 Vendor: Microsoft...
XSS in Microsoft SharePoint Server 2007
Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12.0.0.6421 and Probably Prior Versions Vendor Notification: 12 April 2010 Vulnerability Type:...