Lucene search
+L

8952 matches found

Positive Technologies
Positive Technologies
added 2022/09/13 12:00 a.m.4 views

PT-2022-5781 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to the...

9CVSS9.1AI score0.52885EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.20 views

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

8.8CVSS8.2AI score0.01666EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.14 views

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

8.8CVSS8.2AI score0.01743EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:00 a.m.41 views

Language Security Updates Security Updates for Microsoft Sharepoint 2016 (March 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing language security updates. It is, therefore, affected by Microsoft SharePoint Spoofing Vulnerability CVE-2021-24104 Note that Nessus has not tested for this issue but has instead relied only on the application's...

5.8CVSS5.2AI score0.01369EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:00 a.m.48 views

Language Security Updates for Microsoft SharePoint Server 2016 (December 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing language security updates. It is, therefore, affected by a Microsoft SharePoint Information Disclosure Vulnerability CVE-2020-17089 Note that Nessus has not tested for this issue but has instead relied only on the...

8CVSS7AI score0.02892EPSS
SaveExploits1References2
Hacker One
Hacker One
added 2022/07/28 2:40 p.m.23 views

Nextcloud: Exception logging in Sharepoint app reveals clear-text connection details

Summary: On Exceptions thrown in the context of the SharePoint app, connection credentials may be written to the Nextcloud log in clear text. Steps To Reproduce: Attempt to configure a sharepoint mount in an erroneous way. Supporting Material/References: was files publically:...

4CVSS0.00495EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2022/07/05 12:00 a.m.9 views

July 5, 2022, update for Office 2016 (KB5002192)

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

5.5CVSS6.3AI score0.02556EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.18 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

5.5CVSS6.6AI score0.02714EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.03395EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server relates to insufficient protection of operational data. Exploitation of this vulnerability can allow attackers to gain unauthorized access...

5.5CVSS6.3AI score0.02727EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/24 2:50 p.m.49 views

Security Bulletin: Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections Vulnerability Details CVEID:CVE-2022-30126 DESCRIPTION: Apache Tika is vulnerable to ...

5.5CVSS6.4AI score0.0261EPSS
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/06/23 12:00 a.m.41 views

Microsoft SharePoint Chart Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of charts. Tampering with client-side data can trigger the...

8.8CVSS3.9AI score0.07034EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2022/06/21 12:34 p.m.66 views

Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack

Researchers are warning attackers can abuse Microsoft Office 365 functionality to target files stored on SharePoint and OneDrive in ransomware attacks. Those files, stored via “auto-save” and backed-up in the cloud, typically leave end users with the impression data is shielded from a ransomware...

7.1AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:00 a.m.16 views

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

9CVSS8.2AI score0.11905EPSS
SaveExploits0References5
CNVD
CNVD
added 2022/06/17 12:00 a.m.66 views

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-59591)

Microsoft SharePoint Server is a remote code execution vulnerability in Microsoft SharePoint Server, an enterprise business collaboration platform from Microsoft Corporation. An attacker could use this vulnerability to execute arbitrary code on the system...

8.8CVSS3.8AI score0.03395EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:00 a.m.44 views

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-59590)

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. Microsoft SharePoint Server is vulnerable to a remote code execution vulnerability that could be exploited to execute arbitrary code on the system...

8.8CVSS3.5AI score0.07034EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.07034EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2022/06/16 11:05 a.m.58 views

A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage

A "dangerous piece of functionality" has been discovered in Microsoft 365 suite that could be potentially abused by a malicious actor to mount attacks on cloud infrastructure and ransom files stored on SharePoint and OneDrive. The cloud ransomware attack makes it possible to launch file-encryptin...

0.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.6 views

CVE-2022-30157

Microsoft SharePoint Server Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.07034EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder