3087 matches found
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary CVE-2024-20918, CVE-2024-20921 and CVE-2023-33850 were disclosed in the Oracle 2024 Critical Patch Update. Vulnerability Details CVEID:CVE-2024-20918 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentialit...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out spoofing attacks.
The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks remotely...
U.S. Dept Of Defense: Boolen Based Blind Sql Injection Via User Agent in ███.mil
The report describes a boolean-based blind SQL injection vulnerability in the User-Agent header of the ███.mil application. The vulnerable parameter was identified, and the vulnerability was confirmed by injecting a payload that triggered different application responses based on the boolean...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39672)
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...
Unspecified Vulnerability in Microsoft SharePoint (CNVD-2024-33175)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...
Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2024-39673)
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39671)
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...
Exploit for Deserialization of Untrusted Data in Microsoft
MS-SharePoint-July-Patch-...
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability...
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability...
CVE-2024-38023
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2024-32987 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2024-32987 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2024-38024
CVE-2024-38024 is a Microsoft SharePoint Server remote code execution vulnerability affecting on-premises SharePoint Server. Public sources describe that exploitation can occur when an attacker with site owner privileges injects and executes arbitrary code in the SharePoint service context, enabl...
CVE-2024-38024 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2024-38023 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2024-38023
CVE-2024-38023 affects on-premises Microsoft SharePoint Server. Exploitation path described in connected docs: an attacker with Site Owner permissions can abuse the BDC (Business Data Connectivity) feature via a malicious BDCMetadata.bdcm file to trigger reflective code execution, resulting in RC...
