Page 16 of 241 results (0.013 seconds)

CVSS: 8.8EPSS: 28%CPEs: 5EXPL: 0

CVE-2020-0931 – Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-0931

15 Apr 2020 — A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974. Hay una vulnerabilidad de ejecución de código remota en Microsoft SharePoint cuando el software da un fallo al comprobar la marcación del origen de un paquete de aplicaciones, también se conoce como ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0931 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 8.8EPSS: 28%CPEs: 3EXPL: 0

CVE-2020-0932 – Microsoft SharePoint TypeConverter Deserialization of Untrusted Data Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-0932

15 Apr 2020 — A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0971, CVE-2020-0974. Hay una vulnerabilidad de ejecución de código remota en Microsoft SharePoint cuando el software falla al comprobar la marcación del origen de un paquete de aplicaciones, también se conoce como "Micro... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0932 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-0894

https://notcve.org/view.php?id=CVE-2020-0894

12 Mar 2020 — A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893. Existe una vulnerabilidad de tipo cross-site-scripting (XSS) cuando Microsoft SharePoint Server no sanea apropiadamente una petición web especialmente diseñada en un servidor SharePoint afectado, también se conoce como "Microsoft Office Shar... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0894 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 33%CPEs: 16EXPL: 0

CVE-2020-0892

https://notcve.org/view.php?id=CVE-2020-0892

12 Mar 2020 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855. Existe una vulnerabilidad de ejecución de código remota en el software Microsoft Word, cuando falla al manejar apropiadamente objetos en memoria, también se conoce como "Microsoft Word Remote Code Execution Vulnerability". Este ID de CVE es di... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892 •

CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-0893

https://notcve.org/view.php?id=CVE-2020-0893

12 Mar 2020 — A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894. Existe una vulnerabilidad de tipo cross-site-scripting (XSS) cuando Microsoft SharePoint Server no sanea apropiadamente una petición web especialmente diseñada en un servidor SharePoint afectado, también se conoce como "Microsoft Office Shar... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0893 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-0891

https://notcve.org/view.php?id=CVE-2020-0891

12 Mar 2020 — This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795. Esta vulnerabilidad es causada cuando SharePoint Server no sanea apropiadamente una petición especialmente diseñada en un servidor SharePoint... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 33%CPEs: 12EXPL: 0

CVE-2020-0850

https://notcve.org/view.php?id=CVE-2020-0850

12 Mar 2020 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892. Existe una vulnerabilidad de ejecución de código remota en el software Microsoft Word cuando tiene un fallo al manejar apropiadamente objetos en memoria, también se conoce como "Microsoft Word Remote Code Execution Vulnerability"'. Este ID de ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850 •

CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-0795

https://notcve.org/view.php?id=CVE-2020-0795

12 Mar 2020 — This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891. Esta vulnerabilidad es causada cuando SharePoint Server no sanea apropiadamente una petición especialmente diseñada en un servidor SharePoint... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0795 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 1%CPEs: 3EXPL: 0

CVE-2020-0694

https://notcve.org/view.php?id=CVE-2020-0694

11 Feb 2020 — A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693. Se presenta una vulnerabilidad de tipo cross-site-scripting (XSS) cuando Microsoft SharePoint Server no sanea apropiadamente una petición web especialmente diseñada para un servidor SharePoint afectado, también se conoce como "Microsoft Offi... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0694 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-0693

https://notcve.org/view.php?id=CVE-2020-0693

11 Feb 2020 — A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694. Se presenta una vulnerabilidad de tipo cross-site-scripting (XSS) cuando Microsoft SharePoint Server no sanea apropiadamente una petición web especialmente diseñada para un servidor SharePoint afectado, también se conoce como "Microsoft Offi... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0693 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •