KLA11213 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper handling of...

Microsoft SharePoint Server CVE-2018-0916 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

PT-2018-9148

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting attacks, potentially enablin...

PT-2018-9153

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting attacks, potentially enablin...

CVE-2018-7890

A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 build 13640. The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specified system. This endpoint calls several internal...

Command injection

A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 build 13640. The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specified system. This endpoint calls several internal...

Microsoft Project Server and SharePoint Enterprise Server Elevation of Privilege Vulnerability (CNVD-2018-05733)

Microsoft Project Server and SharePoint Enterprise Server are both products of Microsoft Corporation, U.S.A. Microsoft Project Server 2013 is a project management solution for project portfolio management PPM and day-to-day work. SharePoint Enterprise Server 2016 is an enterprise business...

Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2018-05732)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A...

CVE-2018-0869

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

CVE-2018-0864

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

CVE-2018-0869

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

Information disclosure

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

Privilege escalation

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

CVE-2018-0864

CVE-2018-0864 affects SharePoint Project Server 2013 and SharePoint Enterprise Server 2016. The root cause is improper sanitization of crafted web requests, leading to information disclosure and potential privilege abuse. The issue is addressed by Microsoft security updates KB4011680 (SharePoint ...

CVE-2018-0864

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

CVE-2018-0869

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

CVE-2018-0869

CVE-2018-0869 affects Microsoft SharePoint Server 2016. The issue is an elevation of privilege due to improper sanitization of web requests sent to an affected SharePoint server, allowing an authenticated attacker to gain higher privileges and potentially manipulate content. The vulnerability is ...

CVE-2018-0864: Improper Neutralization of Input During Web Page Generation

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

CVE-2018-0869: Improper Neutralization of Input During Web Page Generation

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4011680) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...