CVE-2013-0085

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

CVE-2013-0083

CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...

MS Exchange Server Remote Code Execution Vulnerabilities (2809279)

This host is missing a critical security update according to Microsoft Bulletin MS13-012. OpenVAS Vulnerability Test $Id: secpodms13-012.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2809279 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities (2784242)

This host is missing an important security update according to Microsoft Bulletin MS13-013. OpenVAS Vulnerability Test $Id: secpodms13-013.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities 2784242 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Word RTF File 'listoverridecount'远程代码执行漏洞（MS12-079)

BUGTRAQ ID: 56834 CVECAN ID: CVE-2012-2539 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Word 在解析listoverridecount相关的RTF（Rich Text Format）数据时存在漏洞。通过诱使用户浏览恶意网站或在e-mail邮件中打开特定格式的rtf文件，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office 2003 Professional Edition Microsoft Office Word Viewer...

MS12-079: Description of the security update for Microsoft SharePoint Server 2010 Service Pack 1 WAS: December 11, 2012

Describes the security update that was released on December 11, 2012 for Microsoft SharePoint Server 2010 Service Pack 1 Word Automation Services WAS.INTRODUCTIONMicrosoft has released security bulletin MS12-079. To view the complete security bulletin, go to one of the following Microsoft...

Microsoft多个产品HTML过滤组件跨站脚本执行漏洞（MS12-066）

CVECAN ID: CVE-2012-2520 Microsoft是一家基于美国的跨国电脑科技公司。以研发、制造、授权和提供广泛的电脑软件服务业务为主。 Microsoft多个产品在HTML过滤组件内没有正确过滤某些输入即返给用户使用。成功利用此漏洞的攻击者可执行跨站脚本攻击并以当前用户权限运行脚本。 0 Microsoft SharePoint Server 2007 Microsoft Office Web Apps Microsoft Groove Server 2010 Microsoft Lync 2010 Microsoft Office Communicator 2007...

MS12-067: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2742321)

The remote host is using a vulnerable version of FAST Search Server 2010 for SharePoint. When the Advanced Filter Pack is enabled, vulnerable versions of the Oracle Outside In libraries are used to parse files. An attacker could exploit this by uploading a malicious file to a site using FAST Sear...

Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities (2742321)

This host is missing an important security update according to Microsoft Bulletin MS12-067. OpenVAS Vulnerability Test $Id: secpodms12-067.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities 2742321 Authors: Madhuri D Copyright: Copyright...

MS12-066: Description of the security update for Microsoft Groove Server 2010 Service Pack 1: October 9, 2012

None None...

CVE-2012-1892

Summary (CVE-2012-1892) : A cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. The issue stems from improper input handling in the TFS web interface, enabl...

Microsoft Security Advisory 2737111: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (deprecated)

This plugin originally checked for the workaround described in Microsoft Security Advisory 2737111, and has been deprecated due to the publication of MS12-067. Microsoft has released a patch that makes the workaround unnecessary. To check for the patch, use Nessus plugin ID xxxxx. %NASLMINLEVEL...

CVE-2012-1859

Cross-site scripting XSS vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka...

Cross site scripting

Cross-site scripting XSS vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka...

CVE-2012-1860

CVE-2012-1860 affects Microsoft SharePoint components: SharePoint Server 2007 (SP2/SP3), SharePoint Server 2010 (Gold/SP1), and Office Web Apps 2010 (Gold/SP1). The root cause is improper permission checks for search scopes, enabling remote authenticated users to view or tamper with other users’ ...

MS12-050: Description of the security update for Groove Server 2010: July 10, 2012

None None...

MS12-050: Description of the security update for SharePoint Server 2010: July 10, 2012

Describes the security update for SharePoint Server 2010, that was released on July 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-050. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)

This host is missing an important security update according to Microsoft Bulletin MS12-011. OpenVAS Vulnerability Test $Id: secpodms12-011.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft SharePoint Privilege Elevation Vulnerabilities 2663841 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

Description of the update for Lync Server 2010: March 2012

Describes the update for Lync Server 2010 that is dated March 2012.SummaryThis article describes the update for Microsoft Lync Server 2010 that is dated March 2012. This article describes the following items about the update package:The issues that the update package fixes.The prerequisites for...