8615 matches found
Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
This host is missing an important security update according to Microsoft Bulletin MS11-074. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS11-074: Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858)
The version of SharePoint Services, SharePoint Server, Groove, or Office Web Apps installed on the remote host has multiple privilege escalation and information disclosure vulnerabilities. A remote attacker could exploit them by tricking a user into making a malicious request, resulting in...
Microsoft Releases Five Bulletins For September Patch Tuesday
Microsoft on Tuesday released again the five security bulletins for its September Patch Tuesday. None of the fixes being released today is rated critical, with all five being rated important. Three of the bulletins fix flaws that could result in code execution. Microsoft also updated the security...
Preemptive Protection against Microsoft SharePoint Server Multiple Cross Site Scripting Vulnerabilities (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
MS11-074: Description of the security update for SharePoint Server 2010 (dlc): September 13, 2011
Resolves a security vulnerability in Microsoft SharePoint Server 2010 that could allow arbitrary code to run when a maliciously modified file is opened.INTRODUCTIONMicrosoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft...
Microsoft Excel Array Index CVE-2011-1990 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file. Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the applicatio...
Microsoft Share Point Picker Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint Calendar CVE-2011-0653 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft SharePoint Server XML Rollup Information Disclosure (MS11-074; CVE-2011-1892)
An information disclosure vulnerability has been reported in Microsoft SharePoint Server. The vulnerability is due to improper handling of malicious XML classes by SharePoint. An attacker could trigger this flaw by loading a malicious XML file to content rollup in an affected SharePoint server...
Microsoft Share Point Query/View Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
MS11-074: Vulnerabilities in Microsoft SharePoint could allow elevation of privilege: September 13, 2011
Resolves vulnerabilities in Microsoft SharePoint could allow elevation of privilege. This bulletin was released on August 9, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...
Microsoft Share Point Calendar Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint CVE-2011-1893 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability
Description Microsoft SharePoint is prone to a vulnerability that lets attackers access local files. An attacker can exploit this vulnerability to retrieve local files from a vulnerable computer in the context of the vulnerable service. Information obtained may aid in further attacks. Technologie...
Microsoft SharePoint 'EditForm.aspx' CVE-2011-1890 Script Injection Vulnerability
Description Microsoft SharePoint is prone to a script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...
Microsoft Share Point TextField_spSave Cross-Site Scripting (MS11-074)
Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...
Microsoft SharePoint Contact Details Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
MS11-074: Description of the security update for SharePoint Workspace 2010: September 13, 2011
None None...
CVE-2011-1252
Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...
Design/Logic Flaw
Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...