Page 23 of 241 results (0.005 seconds)

CVSS: 4.3EPSS: 4%CPEs: 13EXPL: 0

CVE-2018-0919

https://notcve.org/view.php?id=CVE-2018-0919

14 Mar 2018 — Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vul... • http://www.securityfocus.com/bid/103311 • CWE-125: Out-of-bounds Read CWE-908: Use of Uninitialized Resource •

CVSS: 8.8EPSS: 5%CPEs: 1EXPL: 0

CVE-2018-0921

https://notcve.org/view.php?id=CVE-2018-0921

14 Mar 2018 — Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947. >Microsoft SharePoint Enterprise Server 2016 permite una vulnerabilidad de elevación de privi... • http://www.securityfocus.com/bid/103302 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 12%CPEs: 17EXPL: 0

CVE-2018-0922

https://notcve.org/view.php?id=CVE-2018-0922

14 Mar 2018 — Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Wor... • http://www.securityfocus.com/bid/103314 • CWE-787: Out-of-bounds Write •

CVSS: 8.8EPSS: 5%CPEs: 2EXPL: 0

CVE-2018-0923

https://notcve.org/view.php?id=CVE-2018-0923

14 Mar 2018 — Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0944 and CVE-2018-0947. Microsoft SharePoint Enterprise Server 2016 permite una vulnerabilidad de elevación de privil... • http://www.securityfocus.com/bid/103308 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 5%CPEs: 2EXPL: 0

CVE-2018-0944

https://notcve.org/view.php?id=CVE-2018-0944

14 Mar 2018 — Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923 and CVE-2018-0947. Microsoft Project Server 2013 SP1 y Microsoft SharePoin... • http://www.securityfocus.com/bid/103304 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 5%CPEs: 2EXPL: 0

CVE-2018-0947

https://notcve.org/view.php?id=CVE-2018-0947

14 Mar 2018 — Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923 and CVE-2018-0944. Microsoft SharePoint Foundation 2013 SP1 y Micros... • http://www.securityfocus.com/bid/103306 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-0869

https://notcve.org/view.php?id=CVE-2018-0869

15 Feb 2018 — SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". SharePoint Server 2016 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan las peticiones web. Esto también se conoce como "Microsoft SharePoint Elevation of Privilege Vulnerability". • http://www.securityfocus.com/bid/102963 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.0EPSS: 7%CPEs: 3EXPL: 0

CVE-2018-0789

https://notcve.org/view.php?id=CVE-2018-0789

10 Jan 2018 — Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790. Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 y Microsoft SharePoint Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan las petici... • http://www.securityfocus.com/bid/102394 •

CVSS: 8.8EPSS: 6%CPEs: 3EXPL: 0

CVE-2018-0790

https://notcve.org/view.php?id=CVE-2018-0790

10 Jan 2018 — Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789. Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 y Microsoft SharePoint Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan las petici... • http://www.securityfocus.com/bid/102391 •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2018-0799

https://notcve.org/view.php?id=CVE-2018-0799

10 Jan 2018 — Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability". Microsoft Access en Microsoft SharePoint Enterprise Server 2013 y Microsoft SharePoint Enterprise Server 2016 permiten una vulnerabilidad de Cross-Site Scripting (XSS) debido a la forma en la que se gestionan los valores de campo de imagen. Esto también s... • http://www.securityfocus.com/bid/102411 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •