1282 matches found
CVE-2020-25375
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...
Cross site scripting
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...
CVE-2020-25375
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...
Microsoft SharePoint Server 2010 < 14.0.7255.5000 Multiple Vulnerabilities
According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source...
Security Updates for Microsoft Skype for Business (July 2020)
The Microsoft Skype for Business installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token...
The vulnerability of the Skype for Business application in Internet Explorer allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Skype for Business app in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by clicking on a specially created link within the app...
The vulnerability in the Skype for Business app for the Microsoft Edge browser allows a malicious actor to gain unauthorized access to protected information.
The vulnerability in the Skype for Business app for the Microsoft Edge browser is related to the lack of protection for business-related data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by clicking on a specially created link...
Internet Bug Bounty: Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url)
Slides : https://docs.google.com/presentation/d/19WeQbqcOKnrSv1I3Z4sm-oNAf6IVzHwRyQP4i9BvY/editslide=id.g758ad3e04223231 See Blogpost for more details - https://medium.com/@metnew/exploiting-popular-macos-apps-with-a-single-terminal-file-f6c2efdfedaa Summary Popular macOS apps with a file-sharing...
The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification by Oauth. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification using Oauth. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2020-1462
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
CVE-2020-1025
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...
CVE-2020-1025
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...
Information disclosure
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
Information disclosure
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...
CVE-2020-1462
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...
CVE-2020-1462
CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...