Lucene search
+L

3454 matches found

Cvelist
Cvelist
added 2022/04/15 7:2 p.m.36 views

CVE-2022-24472 Microsoft SharePoint Server Spoofing Vulnerability

...

8CVSS8AI score0.01726EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
added 2022/04/13 3:1 p.m.83 views

Microsoft Patch Tuesday, April 2022 Edition

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National...

10CVSS0.3AI score0.9089EPSS
SaveExploits20
Rapid7 Blog
Rapid7 Blog
added 2022/04/12 6:48 p.m.94 views

Patch Tuesday - April 2022

From Defender to Windows, Office to Azure, this month’s Patch Tuesday has a large swath of Microsoft’s portfolio getting vulnerabilities fixed. 119 CVEs were addressed today, not including the 26 Chromium vulnerabilities that were fixed in the Edge browser. One of these has been observed being...

10CVSS0.9AI score0.9089EPSS
SaveExploits40
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.81 views

Description of the security update for SharePoint Server 2019: April 12, 2022 (KB5002180)

None None...

8CVSS7AI score0.01726EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.87 views

Description of the security update for SharePoint Server Subscription Edition: April 12, 2022 (KB5002191)

None None...

8CVSS7AI score0.02583EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2022/04/12 8:0 a.m.73 views

Microsoft SharePoint Server Spoofing Vulnerability

...

8CVSS6.6AI score0.01726EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:0 a.m.52 views

Security Updates for Microsoft SharePoint Server 2016 (April 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...

8CVSS8.5AI score0.02583EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:0 a.m.55 views

Security Updates for Microsoft SharePoint Server 2013 (April 2022)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...

8CVSS8.6AI score0.02583EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.6 views

Microsoft Office Sharepoint Server安全漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. Microsoft SharePoint Server is vulnerable to spoofing and no details of the vulnerability are currently available...

8CVSS7.9AI score0.01726EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:0 a.m.38 views

Security Updates for Microsoft SharePoint Server 2019 (April 2022)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C Tenable Network Security, In...

8CVSS8AI score0.01726EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.7 views

The vulnerability of the Microsoft SharePoint Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

7.6CVSS7.1AI score0.01235EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.12 views

The vulnerability of the Microsoft SharePoint Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

7.6CVSS7.1AI score0.01235EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.8CVSS7.5AI score0.01918EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.13 views

The vulnerability of Microsoft SharePoint Server software, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request from a remote location...

8.7CVSS8.2AI score0.02695EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.12 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and the Microsoft SharePoint Foundation software for electronic document management lies in authentication procedures that allow unauthorized access to confidential information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and the Microsoft SharePoint Foundation software relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

4.3CVSS6.5AI score0.02134EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.12 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages lies in their data deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server packages is related to deficiencies in the data deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.3AI score0.16825EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a...

8.5CVSS7.5AI score0.02018EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/18 12:0 a.m.32 views

Security Updates for Microsoft SharePoint Server 2013 (December 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-43242 ...

8.8CVSS8.4AI score0.02662EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/02/18 12:0 a.m.32 views

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2021)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

8.8CVSS8.2AI score0.02662EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/18 12:0 a.m.66 views

Security Updates for Microsoft SharePoint Server 2016 (December 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-42320,...

8.8CVSS8.2AI score0.02662EPSS
SaveExploits0References6
Rows per page
Query Builder