Page 5 of 519 results (0.006 seconds)

CVSS: 9.0EPSS: 48%CPEs: 3EXPL: 0

11 Jul 2023 — Microsoft SharePoint Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33160 • CWE-502: Deserialization of Untrusted Data •

CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 0

11 Jul 2023 — Microsoft SharePoint Server Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33159 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 2%CPEs: 3EXPL: 0

11 Jul 2023 — Microsoft SharePoint Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33157 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.0EPSS: 66%CPEs: 3EXPL: 0

11 Jul 2023 — Microsoft SharePoint Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33134 • CWE-502: Deserialization of Untrusted Data •

CVSS: 7.8EPSS: 6%CPEs: 2EXPL: 0

11 Jul 2023 — Microsoft SharePoint Server Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33165 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.8EPSS: 6%CPEs: 2EXPL: 0

13 Jun 2023 — Microsoft SharePoint Server Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33142 • CWE-285: Improper Authorization •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0

13 Jun 2023 — Microsoft SharePoint Server Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33132 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.5EPSS: 1%CPEs: 2EXPL: 0

13 Jun 2023 — Microsoft SharePoint Server Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33130 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.8EPSS: 18%CPEs: 2EXPL: 0

13 Jun 2023 — Microsoft SharePoint Denial of Service Vulnerability Microsoft SharePoint Server Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33129 • CWE-122: Heap-based Buffer Overflow •

CVSS: 10.0EPSS: 94%CPEs: 1EXPL: 8

13 Jun 2023 — Microsoft SharePoint Server Elevation of Privilege Vulnerability This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ValidateTokenIssuer method. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Microsoft SharePoint Server conta... • https://packetstorm.news/files/id/177802 • CWE-303: Incorrect Implementation of Authentication Algorithm •