Lucene search
+L

8942 matches found

Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.6 views

PT-2020-4036 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A tampering issue exists due to...

6.3CVSS6.5AI score0.01807EPSS
SaveExploits1References5
Kaspersky
Kaspersky
added 2020/09/08 12:00 a.m.104 views

KLA11950 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

9.9CVSS9AI score0.04425EPSS
SaveExploits3References62
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.7 views

PT-2020-4023 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests. An attacker could exploit this by sending a crafted request,...

5.4CVSS5.7AI score0.01627EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.3 views

PT-2020-4043 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A spoofing issue exists due to improper sanitization of specially crafted web requests to an affected SharePoint server. An authenticated attacker could exploit this by...

4.9CVSS5.2AI score0.01772EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.5 views

PT-2020-3905 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...

7.4CVSS6.8AI score0.02677EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.3 views

PT-2020-3906 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A remote code execution issue exists due to insufficient input validation in Microsoft SharePoint Server. This allows an authenticated attacker to execute arbitrary code...

9CVSS8.7AI score0.03703EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.5 views

PT-2020-3961 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A remote code execution issue exis...

9.9CVSS9.2AI score0.01954EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.6 views

PT-2020-3989 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server affected versions not specified Description: A remote code execution issue exists in Microsoft SharePoint due to the software's failure to properly check the...

9CVSS8.7AI score0.01915EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.5 views

PT-2020-4074 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...

6.4CVSS5.6AI score0.01635EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.7 views

PT-2020-4037 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...

6.3CVSS6.1AI score0.01984EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.10 views

PT-2020-3901 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: A remote code execution issue exists in Microsoft SharePoint due to the software's failure to properly check the source markup of an application package. This could allow a...

9.9CVSS8.8AI score0.0176EPSS
SaveExploits1References6
NCSC
NCSC
added 2020/09/08 12:00 a.m.23 views

Vulnerabilities fixed in Microsoft SharePoint

Microsoft is fixing several vulnerabilities in Microsoft SharePoint. A malicious party could potentially exploit the vulnerabilities to execute arbitrary code or to conduct a Cross-Site-Scripting XSS attack. Two of the vulnerabilities in SharePoint can be exploited to execute arbitrary code in th...

9.9CVSS6.7AI score0.03703EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.4 views

PT-2020-4147 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: A remote code execution issue exists in Microsoft SharePoint due to the software's failure to properly check the source markup of an application package. This could allow an...

9CVSS8.7AI score0.02127EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2020/09/01 12:00 a.m.9 views

September 1, 2020, update for Office 2016 (KB4484395)

None None...

6.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/08/31 9:03 a.m.24 views

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of...

4.3CVSS0.3AI score0.03823EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/08/31 7:39 a.m.24 views

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of...

4.3CVSS0.3AI score0.03823EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/08/31 7:34 a.m.30 views

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of...

4.3CVSS0.3AI score0.03823EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/08/31 7:24 a.m.36 views

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of...

4.3CVSS0.2AI score0.03823EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks, inject arbitrary web...

5.4CVSS6.5AI score0.01586EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:00 a.m.13 views

The vulnerability of Microsoft SharePoint Server, SharePoint Enterprise Server, and Microsoft SharePoint Foundation software for electronic document management exists due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Enterprise Server, and Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

5.5CVSS6.3AI score0.01882EPSS
SaveExploits0References3
Rows per page
Query Builder