Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Vulnerability MS13-067

No description provided by source...

IE9, SharePoint, Lync toStaticHTML HTML Sanitizing Bypass

No description provided by source. toStaticHTML: The Second Encounter CVE-2012-1858 HTML Sanitizing Bypass - CVE-2012-1858http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1858 Original advisory -...

Microsoft SharePoint Server 2.0 Picture Source HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28706/info Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacker requires access to a user...

Microsoft released a“denial of service vulnerability”fixes-bug warning-the black bar safety net

In patch 5 9 IE vulnerability after Microsoft finally for its security software to plug a security vulnerability. It is reported that the vulnerability may be in use“Malware Protection engine”Malware Protection Engineto scan when triggered. Then, the attacker can use it to launch denial of...

Cisco Wide Area Application Services code execution

SharePoint prefetch memory corruption...

Microsoft SharePoint Installed (credentialed check)

Binary data microsoftsharepointinstalled.nbin...

Microsoft SharePoint Server Unsupported Version Detection

The remote host has an unsupported version of SharePoint Server installed. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2014-3285

Cisco Wide Area Application Services WAAS 5.3.5a and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service application-optimization handler reload via a crafted SharePoint application, aka Bug ID...

Code injection

Cisco Wide Area Application Services WAAS 5.3.5a and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service application-optimization handler reload via a crafted SharePoint application, aka Bug ID...

CVE-2014-3285

Cisco WAAS 5.3(.5a) and earlier with SharePoint acceleration enabled is vulnerable to a denial-of-service caused by improper parsing of SharePoint responses, triggering a reload of the application-optimization handler. Exploitation could be achieved by convincing a user to access a crafted ShareP...

CVE-2014-3285

Cisco Wide Area Application Services WAAS 5.3.5a and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service application-optimization handler reload via a crafted SharePoint application, aka Bug ID...

Cisco Wide Area Application Services Partial Denial of Service Vulnerability

A vulnerability in Cisco Wide Area Application Services WAAS software, when configured with the SharePoint acceleration feature, could allow an unauthenticated, remote attacker to cause a reload of the application optimization handler. The vulnerability is due to incorrect parsing of SharePoint...

CVE-2014-2196

Cisco Wide Area Application Services WAAS 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479...

Code injection

Cisco Wide Area Application Services WAAS 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479...

CVE-2014-2196

CVE-2014-2196 affects Cisco Wide Area Application Services (WAAS) versions 5.1.1 and earlier, with SharePoint prefetch optimization enabled. The issue enables remote code execution through a malformed response in the SharePoint acceleration path, due to a buffer/response handling flaw. Exploitati...

CVE-2014-2196

Cisco Wide Area Application Services WAAS 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479...

Cisco Wide Area Application Services Remote Code Execution Vulnerability

A vulnerability in Cisco Wide Area Application Services WAAS software versions 5.1.1 through 5.1.1d, when configured with the SharePoint acceleration feature, could allow an unauthenticated, remote attacker to exploit a buffer overflow and cause arbitrary code execution. The vulnerability is due ...

May 2014 Security Bulletin Webcast and Q&A

Today we published the May 2014 Security Bulletin Webcast Questions & Answers page. We answered 17 questions in total, with the majority focusing on the update for SharePoint MS14-022, Group Policy MS14-025 and Internet Explorer MS14-029. Here is the video replay: We invite you to join us for the...

CVE-2014-0251

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013...

Code injection

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013...