Lucene search
+L

174 matches found

OSV
OSV
added 2020/09/11 5:15 p.m.3 views

CVE-2020-1440

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

6.3CVSS6.8AI score0.01807EPSS
SaveExploits1References1
NVD
NVD
added 2020/09/11 5:15 p.m.18 views

CVE-2020-1440

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

6.3CVSS0.01807EPSS
SaveExploits1References1
Prion
Prion
added 2020/09/11 5:15 p.m.22 views

Code injection

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

4CVSS6.8AI score0.01807EPSS
SaveExploits1References1Affected Software2
Prion
Prion
added 2020/09/11 5:15 p.m.20 views

Code injection

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

4CVSS6.8AI score0.02217EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2020/09/10 12:0 a.m.4 views

Microsoft SharePoint Server Tampering Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

6.3CVSS6.6AI score0.01807EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.45 views

Microsoft SharePoint Server Tampering Vulnerability

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

6.3CVSS1.8AI score0.01807EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.34 views

Microsoft SharePoint Server Tampering Vulnerability

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

8.9CVSS1.8AI score0.02217EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.5 views

PT-2020-4034 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

8.9CVSS8.2AI score0.02217EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.4 views

PT-2020-4036 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A tampering issue exists due to...

6.3CVSS6.5AI score0.01807EPSS
SaveExploits1References5
OSV
OSV
added 2020/07/23 4:23 a.m.4 views

OPENSUSE-SU-2020:1042-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR Fixed: Security fix Fixed: Fixed an accessibility regression in...

7.1AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/07/15 12:0 a.m.4 views

PT-2020-20579 · Silverstripe · Silverstripe

Name of the Vulnerable Software and Affected Versions: SilverStripe versions prior to 4.5 Description: The issue allows malicious users with a valid Silverstripe CMS login to craft profile information, leading to cross-site scripting XSS for other users through specially crafted login form URLs...

5.4CVSS5.2AI score0.00556EPSS
SaveExploits0References9
Prion
Prion
added 2020/06/11 2:15 p.m.17 views

Security feature bypass

A vulnerability based on insecure user/password encryption in the JOE job editor component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile...

5CVSS7.3AI score0.07842EPSS
SaveExploits6References4Affected Software1
Kitploit
Kitploit
added 2019/11/21 8:51 p.m.345 views

Ultimate Facebook Scraper - A Bot Which Scrapes Almost Everything About A Facebook User'S Profile Including All Public Posts/Statuses Available On The User'S Timeline, Uploaded Photos, Tagged Photos, Videos, Friends List And Their Profile Photos

Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. Features A bot which scrapes almost everything about a facebook user's profile including uploaded photos tagged photos videos friends list and their profile photos...

7AI score
SaveExploits0References1
Hacker One
Hacker One
added 2019/08/17 6:28 p.m.58 views

Mail.ru: Delete images of users with clickjacking in https://pw.mail.ru

Researcher found site-wide Clickjacking on https://pw.mail.ru which potentially could be used to trick user to delete avatar or change his/her profile data...

1.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/03/13 12:0 a.m.6 views

The vulnerability of the Microsoft Exchange Server, related to errors in processing user profile data, allows a hacker to alter user profile data.

The vulnerability of Microsoft Exchange Server is related to errors in processing user profile data. Exploiting this vulnerability can allow a malicious actor to remotely alter user profile data...

6.5CVSS5.8AI score0.03024EPSS
SaveExploits0References3
OSV
OSV
added 2018/12/12 12:29 a.m.0 views

CVE-2018-8604

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

4.3CVSS5.8AI score0.02409EPSS
SaveExploits0References2
NVD
NVD
added 2018/12/12 12:29 a.m.16 views

CVE-2018-8604

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

4.3CVSS6.5AI score0.02409EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/12 12:29 a.m.19 views

Spoofing

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

4CVSS5.2AI score0.02409EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.2 views

CVE-2018-8604

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

4.3CVSS5.5AI score0.02409EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Microsoft Exchange Server Tampering Vulnerability

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

4.3CVSS2AI score0.02409EPSS
SaveExploits0
Rows per page
Query Builder