Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Security Updates for Microsoft SharePoint Server and Microsoft Project Server (February 2018)

The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall...

CVE-2018-0120

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerability exists because the affected software fails to validate user-supplied input in certain SQL...

The vulnerability of the cgiHandler function in the Embedthis GoAhead web server allows a hacker to execute arbitrary code.

The vulnerability of the cgiHandler function in the Embedthis GoAhead web server is related to insufficient validation of input data during the processing of HTTP requests for dynamically linked CGI programs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through...

phpMyAdmin Cross-Site Request Forgery Vulnerability (CNVD-2018-04307)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site request forgery vulnerability exists in phpMyAdmin due to the program failing to properly validate HTTP requests. A remote attacker could exploit the vulnerability to perform certain...

CVE-2018-5726

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by the username, password, and configuration settings...

Privilege escalation

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

CVE-2018-0790

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

CVE-2018-0789

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

CVE-2018-0789

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

CVE-2018-0790

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

CVE-2018-0790

CVE-2018-0790 affects Microsoft SharePoint Foundation 2010, and Microsoft SharePoint Server 2013 and 2016. The vulnerability is an elevation of privilege due to the way web requests are handled in these products. The description lists the issue as a privilege escalation vulnerability and explicit...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Foundation and SharePoint Server are both business collaboration platforms from Microsoft. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, and so on. An elevation of privilege vulnerability exists in Microsoft...

Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2018-00893)

Microsoft SharePoint Foundation and SharePoint Server are both business collaboration platforms from Microsoft. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, and so on. An elevation of privilege vulnerability exists in Microsoft...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

ASP.NET Core Elevation Of Privilege Vulnerability

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests. An attacker who successfully exploited this vulnerability could perform content injection attacks and run script in the security...

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager allows a hacker to execute arbitrary operating system commands.

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager exists because measures to neutralize the special elements used in operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands via...

CVE-2017-6133

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service...

Microsoft Exchange Spoofing Vulnerability

Microsoft Exchange Server 2016 is a suite of email service programs from Microsoft USA that provides email access, storage, forwarding, voicemail, email filtering and screening, etc. CU6 and CU7 are 2 of the cumulative updates. A security vulnerability exists in Microsoft Exchange Server 2016 CU6...

Microsoft SharePoint Enterprise Server Elevation of Privilege Vulnerability

Microsoft SharePoint Enterprise Server 2016 is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for...