3454 matches found
The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages lies in the fact that operations are performed outside of the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Microsoft Office Input Validation Error Vulnerability
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft SharePoint Server 2019 that stems from Microsoft Office failin...
CVE-2019-1443
An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The...
Description of the security update for SharePoint Server 2010: November 12, 2019
Description of the security update for SharePoint Server 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for SharePoint Server 2019 Language Pack: November 12, 2019
None None...
Description of the security update for SharePoint Enterprise Server 2013: November 12, 2019
None None...
Microsoft Office CVE-2019-1442 Security Bypass Vulnerability
Description Microsoft Office is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft SharePoint Server 2019 Recommendations Run all software as a...
Security Updates for Microsoft SharePoint Server (November 2019)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted...
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.
The vulnerabilities of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to increase their privileges remotely...
The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation lies in the lack of measures taken to protect the structure of web pages, allowing attackers to enhance their privileges.
The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation lies in the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2019-1328
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...
CVE-2019-1329
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...
CVE-2019-1070
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...
Description of the security update for SharePoint Server 2010: October 8, 2019
Description of the security update for SharePoint Server 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. To learn more about the vulnerability,...
Description of the security update for SharePoint Server 2019: October 8, 2019
None None...
Microsoft SharePoint Server CVE-2019-1328 Spoofing Vulnerability
Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...
Microsoft SharePoint Server CVE-2019-1329 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint...
Security Updates for Microsoft SharePoint Server (Oct 2019)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...