4128 matches found
Microsoft SharePoint Server Unauthorized Access Vulnerability
Description Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server. Technologies Affected Microsoft SharePoint Server 2007 Microsoft...
Microsoft Excel公式解析整数溢出漏洞（MS08-057）
BUGTRAQ ID: 31706 CVECAN ID: CVE-2008-4019 Excel是微软Office办公套件中的电子表格工具。 Excel的REPT函数在处理单元格中的公式时存在整数溢出漏洞。如果用户受骗打开了特意的.xsl文档的话，就可以触发这个溢出，导致执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft Excel 2003 SP3...
Microsoft Excel COUNTRY记录内存破坏漏洞（MS08-043）
BUGTRAQ ID: 30640 CVECAN ID: CVE-2008-3006 Excel是Microsoft Office办公软件套件中的电子表格工具。 Excel没有正确地处理BIFF文件格式，在处理文件中的畸形Country（0x8c）记录时可能会触发内存破坏，导致以当前登录用户的权限执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft...
CVE-2008-3006: Undefined Security Weakness
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country...
Microsoft Excel Record Parsing Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...
Microsoft SharePoint Server 2.0 - Picture Source HTML Injection
Microsoft SharePoint Server 2.0 - Picture Source HTML Injection source: https://www.securityfocus.com/bid/28706/info Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacke...
Microsoft SharePoint Server跨站脚本漏洞（MS07-059）
BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...
MS07-059: Vulnerability in Windows SharePoint Could Result in Elevation of Privilege (942017)
The remote host is running a version of SharePoint Server 2007 or SharePoint Services 3.0 that is vulnerable to a privilege elevation attack in the SharePoint site. An attacker may use this to execute scripts in the context of the SharePoint site. C Tenable Network Security, Inc...
CVE-2007-2581: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO query string in "every main page," as demonstrated by default.asp...
Microsoft SharePoint Server 3.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/23832/info Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Microsoft SharePoint Server 3.0 - Cross-Site Scripting
Microsoft SharePoint Server 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/23832/info Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Update for Microsoft SharePoint Server 2010 (KB2899589)
Update for Microsoft SharePoint Server 2010 KB2899589...
Update for Microsoft SharePoint Server 2010 (KB2837585)
Update for Microsoft SharePoint Server 2010 KB2837585...
Update for Microsoft SharePoint Server 2010 (KB2510639)
Update for Microsoft SharePoint Server 2010 KB2510639...
Update for Microsoft SharePoint Server 2010 (KB2899589)
Update for Microsoft SharePoint Server 2010 KB2899589...
Update for Microsoft SharePoint Server 2010 (KB2880516)
Update for Microsoft SharePoint Server 2010 KB2880516...
Update for Microsoft SharePoint Enterprise Server 2013 (KB2920760) farm-deployment
Update for Microsoft SharePoint Enterprise Server 2013 KB2920760 farm-deployment...