10145 matches found
CVE-2016-0022
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 201...
CVE-2016-0054: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint...
CVE-2016-0039: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
CVE-2016-0022: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 201...
Microsoft SharePoint Server Excel Services Remote Code Execution Vulnerability (3134226)
This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-0053: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execut...
Microsoft Office CVE-2016-0052 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
PT-2016-1169
Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Word Viewer version affected versions not specified Word Automation Services on SharePoint Server version 2013 SP1 Office Web Apps Server version 2013 SP1...
Microsoft Office CVE-2016-0054 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-0022 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
KLA10754 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be exploited remotely via a specially design...
PT-2016-1235
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 SP1 Description A cross-site scripting XSS issue exists due to inadequate protection of the web page structure, allowing remote attackers to inject arbitrary web script or HTML via a crafted request. This c...
MS16-015: Security Update for Microsoft Office to Address Remote Code Execution: February 9, 2016
Describes a security update that fixes vulnerabilities in Microsoft Office. The most severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office. To learn more...
Microsoft SharePoint CVE-2016-0039 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
MS16-015: Security Update for Microsoft Office to Address Remote Code Execution (3134226)
The remote Windows host has a version of Microsoft Office, Word, Word Viewer, Excel, Excel Viewer, SharePoint, Microsoft Office Compatibility Pack, or Office Web Apps installed that is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper...
Microsoft SharePoint Foundation XSS
The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...
Microsoft SharePoint Foundation XSS
The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...
Microsoft SharePoint Security Feature Bypass Vulnerability
Microsoft Office is an office software suite based on the Windows operating system. A security feature bypass vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to bypass target ACP restrictions and conduct XSS attacks by modifying the webpart...
Microsoft SharePoint Security Bypass Vulnerability
Microsoft Office is an office software suite based on the Windows operating system. A security feature bypass vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to bypass target ACP restrictions and conduct XSS attacks by modifying the webpart...
Microsoft SharePoint Server Security Mechanism Bypass Vulnerability
Microsoft SharePoint Server is the U.S. Microsoft Microsoft company launched the integrated suite of server functionality to provide comprehensive WEB-based information sharing and document collaboration technology content management and enterprise search, accelerate the sharing of business...