Lucene search
+L

8942 matches found

CNVD
CNVD
added 2020/08/04 12:00 a.m.16 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-64006)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.02229EPSS
SaveExploits1References1
zdt
zdt
added 2020/08/01 12:00 a.m.902 views

SharePoint DataSet / DataTable Deserialization Exploit

A remotely exploitable vulnerability exists within SharePoint that can be leveraged by a remote authenticated attacker to execute code within the context of the SharePoint application service. The privileges in this execution context are determined by the account that is specified when SharePoint...

7.8CVSS8.1AI score0.94347EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2020/07/31 12:00 a.m.458 views

SharePoint DataSet / DataTable Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SharePoint DataSet / DataTable Deserialization', 'Description' = %q A remotely exploitable vulnerability exists within SharePoint that can be...

6.8CVSS0.1AI score0.94347EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers or by...

5.4CVSS6.4AI score0.01565EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to insufficient cleaning of web requests, allows attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.02229EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.16 views

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.2AI score0.06119EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/07/30 12:00 a.m.11 views

Microsoft PerformancePoint Services Remote Code Execution Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS8.2AI score0.20265EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/30 12:00 a.m.13 views

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2020-45185)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS6.5AI score0.01654EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/30 12:00 a.m.22 views

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2020-45183)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.21 views

The vulnerability of PerformancePoint Services in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.

The vulnerability of PerformancePoint Services in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS8AI score0.20265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.20 views

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to object handling errors in memory. Exploiting thes...

9CVSS8.1AI score0.10677EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.17 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.17 views

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing an intruder to gain unauthorized access to protected information.

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to errors in memory object handling. Exploiting thes...

6.8CVSS6.3AI score0.06411EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.12 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted message...

4.3CVSS7AI score0.0909EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.20 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in information representation errors in the user interface, which allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

5.5CVSS6.6AI score0.01654EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/24 12:00 a.m.17 views

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint programs is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS8.1AI score0.09999EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/24 12:00 a.m.13 views

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint programs is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS8.1AI score0.11278EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/22 12:00 a.m.47 views

RHEL 8 : .NET Core (RHSA-2020:2988)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2988 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

7.8CVSS8.2AI score0.94347EPSS
SaveExploits10References5
CNVD
CNVD
added 2020/07/20 12:00 a.m.19 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-45311)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01565EPSS
SaveExploits0References1
Rows per page
Query Builder