Lucene search

K

Microsoft Sharepoint Foundation 2010 Service Pack 2 Security Vulnerabilities

cve
cve

CVE-2021-28450

Microsoft SharePoint Denial of Service...

5CVSS

5.7AI Score

0.001EPSS

2021-04-13 08:15 PM
80
cve
cve

CVE-2021-27076

Microsoft SharePoint Server Remote Code Execution...

8.8CVSS

8.7AI Score

0.053EPSS

2021-03-11 04:15 PM
118
9
cve
cve

CVE-2021-24066

Microsoft SharePoint Remote Code Execution...

8.8CVSS

8.6AI Score

0.014EPSS

2021-02-25 11:15 PM
81
2
cve
cve

CVE-2021-24071

Microsoft SharePoint Information Disclosure...

5.3CVSS

6.2AI Score

0.006EPSS

2021-02-25 11:15 PM
65
2
cve
cve

CVE-2021-1726

Microsoft SharePoint Server Spoofing...

8CVSS

7.9AI Score

0.001EPSS

2021-02-25 11:15 PM
73
3
cve
cve

CVE-2021-1718

Microsoft SharePoint Server Tampering...

8CVSS

7.7AI Score

0.001EPSS

2021-01-12 08:15 PM
75
4
cve
cve

CVE-2021-1707

Microsoft SharePoint Server Remote Code Execution...

8.8CVSS

8.6AI Score

0.013EPSS

2021-01-12 08:15 PM
94
2
cve
cve

CVE-2020-17115

Microsoft SharePoint Server Spoofing...

8CVSS

7.6AI Score

0.002EPSS

2020-12-10 12:15 AM
98
3
cve
cve

CVE-2020-17120

Microsoft SharePoint Information Disclosure...

5.3CVSS

5.1AI Score

0.006EPSS

2020-12-10 12:15 AM
91
4
cve
cve

CVE-2020-17121

Microsoft SharePoint Remote Code Execution...

8.8CVSS

8.6AI Score

0.021EPSS

2020-12-10 12:15 AM
103
4
cve
cve

CVE-2020-17118

Microsoft SharePoint Remote Code Execution...

8.1CVSS

8.6AI Score

0.025EPSS

2020-12-10 12:15 AM
124
3
cve
cve

CVE-2020-17089

Microsoft SharePoint Elevation of Privilege...

7.1CVSS

6.8AI Score

0.002EPSS

2020-12-10 12:15 AM
89
2
cve
cve

CVE-2020-17061

Microsoft SharePoint Remote Code Execution...

8.8CVSS

8.6AI Score

0.013EPSS

2020-11-11 07:15 AM
79
cve
cve

CVE-2020-17017

Microsoft SharePoint Information Disclosure...

5.3CVSS

5.1AI Score

0.006EPSS

2020-11-11 07:15 AM
74
cve
cve

CVE-2020-17016

Microsoft SharePoint Server Spoofing...

8CVSS

7.6AI Score

0.001EPSS

2020-11-11 07:15 AM
68
cve
cve

CVE-2020-16948

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...

6.5CVSS

6.3AI Score

0.011EPSS

2020-10-16 11:15 PM
95
cve
cve

CVE-2020-16946

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint....

8.7CVSS

7.3AI Score

0.001EPSS

2020-10-16 11:15 PM
79
cve
cve

CVE-2020-16953

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...

6.5CVSS

6.3AI Score

0.011EPSS

2020-10-16 11:15 PM
96
cve
cve

CVE-2020-16942

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of.....

4.1CVSS

4.9AI Score

0.0004EPSS

2020-10-16 11:15 PM
74
cve
cve

CVE-2020-16941

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of.....

4.1CVSS

4.9AI Score

0.0004EPSS

2020-10-16 11:15 PM
85
cve
cve

CVE-2020-1576

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint.....

8.5CVSS

8.6AI Score

0.013EPSS

2020-09-11 05:15 PM
59
cve
cve

CVE-2020-1452

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint.....

8.6CVSS

8.6AI Score

0.007EPSS

2020-09-11 05:15 PM
70
cve
cve

CVE-2020-1460

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security...

8.6CVSS

8.5AI Score

0.006EPSS

2020-09-11 05:15 PM
64
cve
cve

CVE-2020-1345

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint....

7.4CVSS

6.9AI Score

0.002EPSS

2020-09-11 05:15 PM
80
cve
cve

CVE-2020-1453

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint.....

8.6CVSS

8.6AI Score

0.007EPSS

2020-09-11 05:15 PM
69
cve
cve

CVE-2020-1482

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint....

6.3CVSS

6.3AI Score

0.001EPSS

2020-09-11 05:15 PM
64
cve
cve

CVE-2020-1205

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

4.6CVSS

5.6AI Score

0.001EPSS

2020-09-11 05:15 PM
66
cve
cve

CVE-2020-1210

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint.....

9.9CVSS

8.9AI Score

0.013EPSS

2020-09-11 05:15 PM
185
In Wild
cve
cve

CVE-2020-1200

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint.....

8.6CVSS

8.6AI Score

0.007EPSS

2020-09-11 05:15 PM
63
cve
cve

CVE-2020-1573

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint....

5.5CVSS

5.4AI Score

0.0004EPSS

2020-08-17 07:15 PM
75
cve
cve

CVE-2020-1580

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint....

5.4CVSS

5.4AI Score

0.001EPSS

2020-08-17 07:15 PM
66
cve
cve

CVE-2020-1505

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...

5.5CVSS

5.5AI Score

0.014EPSS

2020-08-17 07:15 PM
71
cve
cve

CVE-2020-1501

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM
90
cve
cve

CVE-2020-1499

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM
75
cve
cve

CVE-2019-1202

An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who successfully exploited the vulnerability could hijack the session of another user. To exploit this vulnerability, the attacker could run a specially crafted...

4.4CVSS

4.2AI Score

0.001EPSS

2019-08-14 09:15 PM
58