Cross-site Scripting (XSS)

Microsoft.AspNet.SignalR is vulnerable to cross-site scripting XSS attack. The application does not properly sanitize user-supplied input before displaying it. This can allow a malicious user to inject and execute arbitrary code in the target user's browser which can lead to access to...

Security update 2018-06-19

...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4022179) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4022183)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Enterprise Server 2013: June 12, 2018

None None...

Description of the security update for SharePoint Enterprise Server 2013: June 12, 2018

None None...

Microsoft Office CVE-2018-8247 Privilege Escalation Vulnerability

Description Microsoft Office is prone to a privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Office Online Server 2016 Microsoft Office Web Apps Server 2013 SP1 Recommendations Run all software as a nonprivileged...

Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11553)

Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Server 2010 SP2 are both Microsoft enterprise business collaboration platforms for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4018388) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Enterprise Server 2013: May 8, 2018

None None...

Description of the security update for Project Server 2013: May 8, 2018

Description of the security update for Project Server 2013: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for SharePoint Enterprise Server 2013: May 8, 2018

None None...

Microsoft SharePoint Server CVE-2018-8156 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018

None None...

Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018

None None...

Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018

None None...

CVE-2018-0944

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0924

Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016 Cumulative Update 7, and Microsoft Exchange Serve...

CVE-2018-0913

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0910

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...