CVE-2024-45849

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query i...

CVE-2024-45849

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query i...

CVE-2024-45849

The MindsDB CVE-2024-45849 vulnerability is confirmed to be an arbitrary code execution via the Microsoft SharePoint integration. A specially crafted INSERT query on databases created with the SharePoint engine can inject Python code that is passed to eval() and executed on the server. Affected v...

CVE-2024-45849

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query i...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39525)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Microsoft SharePoint Server Denial of Service Vulnerability (CNVD-2024-39522)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A denial of...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39524)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39521)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39523)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

CVE-2024-43466

Microsoft SharePoint Server Denial of Service Vulnerability...

CVE-2024-43464

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-38227

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-38018

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-38018

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-43466 Microsoft SharePoint Server Denial of Service Vulnerability

...

CVE-2024-43466 Microsoft SharePoint Server Denial of Service Vulnerability

...

CVE-2024-43466

Microsoft SharePoint Server Denial of Service vulnerability (CVE-2024-43466) affects on-prem SharePoint Server. The provided documents describe a denial-of-service issue but do not specify the exact vulnerable component, root cause, or affected product versions. Related entries indicate security ...

CVE-2024-38228 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2024-38228 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2024-38228

CVE-2024-38228 is a Microsoft SharePoint Server remote code execution vulnerability. Public sources indicate it affects SharePoint Server and is addressed by security updates KB5002640 (SharePoint Server Subscription Edition), KB5002624 (SharePoint Enterprise Server 2016), and KB5002639 (SharePoi...