9773 matches found
Description of the security update for SharePoint Server 2010: January 8, 2019
Description of the security update for SharePoint Server 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019
Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...
PT-2019-1134 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to inadequate protection of the web page structure. This can be exploited by sending a specially crafted request to the vulnerabl...
Microsoft Office SharePoint CVE-2019-0556 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
CVE-2019-0557: Improper Neutralization of Input During Web Page Generation
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...
CVE-2019-0558: Improper Neutralization of Input During Web Page Generation
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint,...
Microsoft SharePoint Server CVE-2019-0562 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Microsoft Office SharePoint CVE-2019-0557 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
KLA11396 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
CVE-2019-0562: Undefined Security Weakness
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...
CVE-2019-0556: Improper Neutralization of Input During Web Page Generation
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...
PT-2019-1136 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable server,...
Microsoft Office SharePoint CVE-2019-0558 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Microsoft Word CVE-2019-0585 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
CVE-2019-0585: Undefined Security Weakness
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint,...
PT-2019-1135 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable SharePoi...
SQL Injection Vulnerabilities Exist in Many Places in Yuanheng Times Workflow Engine System
Beijing Yuanheng Times Technology Co., Ltd. is the first full-service IT service provider in China to launch a collaboration management system based on Microsoft SharePoint platform. SQL injection vulnerability exists in many places in the workflow engine system of Yuanheng Times, which can be...
The vulnerability of the Microsoft SharePoint Enterprise Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges.
The vulnerability of the Microsoft SharePoint Enterprise Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially crafted request...
Veeam Backup for Microsoft 365 v2 cumulative patch KB2809
Challenge Veeam Backup for Microsoft 365 v2 cumulative patch KB2809. Cause Please confirm you are running Veeam Backup for Microsoft 365 version 2.0.0.567 or 2.0.0.594 see KB2765 for more details prior to installing this cumulative patch KB2809. You can check the product version under Help About ...
The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.
The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...