9994 matches found
Description of the security update for SharePoint Foundation 2013: January 9, 2018
Description of the security update for SharePoint Foundation 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for SharePoint Enterprise Server 2016: January 9, 2018
None None...
Description of the security update for SharePoint Server 2013: January 9, 2018
Description of the security update for SharePoint Server 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for SharePoint Foundation 2010: January 9, 2018
Description of the security update for SharePoint Foundation 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft SharePoint Server CVE-2018-0790 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...
Microsoft Access CVE-2018-0799 Cross Site Scripting Vulnerability
Description Microsoft Access is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...
Microsoft Word CVE-2018-0797 Memory Corruption Vulnerability
Description Microsoft Word is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Offic...
PT-2018-9071
Name of the Vulnerable Software and Affected Versions: Microsoft Access in Microsoft SharePoint Enterprise Server versions prior to the fixed version Description: A cross-site-scripting XSS issue exists due to improper sanitization of inputs to image fields edited within Design view. This could...
PT-2018-9070
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 Microsoft SharePoint Server 2016 Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint...
Microsoft SharePoint Server CVE-2018-0789 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Microsoft Word CVE-2018-0792 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Security Update for Microsoft SharePoint Server (January 2018)
The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a...
PT-2018-1079
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation version 2010 Microsoft SharePoint Server versions 2013 through 2016 Description The issue is related to the handling of web requests and insufficient access control, allowing an elevation of privilege. An...
KLA11180 Multiple vulnerabilities in Microsoft Office Online
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Remote code execution vulnerability in Microsoft Office software can be exploited via specially crafte...
KLA11170 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface and obtain sensitive information. Below is a complete list of vulnerabilities: 1. Elevation of privilege vulnerabilities in...
Microsoft SharePoint Limited Access Permission Bypass
vulnerability Title: Microsoft SharePoint 'Limited Access' Permission Bypass This vulnerability was discovered by 'Behnam Vanda' January 07, 2018 ====================== I. About Vulnerability ====================== A permission level bypass vulnerability has been identified in microsoft sharePoin...
MS Sharepoint 2013 - Limited Access Permission Bypass
Document Title: =============== MS Sharepoint 2013 - Limited Access Permission Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2111 Release Date: ============= 2018-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 211...
MS Sharepoint 2013 - Limited Access Permission Bypass
Document Title: =============== MS Sharepoint 2013 - Limited Access Permission Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2111 Release Date: ============= 2018-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 211...