9991 matches found
Microsoft SharePoint Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
Description of the security update for SharePoint Server Subscription Edition: January 13, 2026 (KB5002822)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: January 13, 2026 (KB5002823)
None None...
CVE-2026-20959: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-20958: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-20951: Improper Input Validation
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...
Microsoft Office 代码问题漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A code issue vulnerability exists in Microsoft Office. An attacker exploiting this...
Microsoft SharePoint SQL注入漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An SQL injection...
CVE-2026-20963: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
PT-2026-2760
Name of the Vulnerable Software and Affected Versions SharePoint Enterprise Server 2016 SharePoint Server 2019 SharePoint Server Subscription Edition Description Microsoft Office SharePoint contains a flaw involving the deserialization of untrusted data. Deserialization is the process of converti...
Microsoft SharePoint 代码问题漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code issue vulnerabili...
PT-2026-2751
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation in Microsoft Office SharePoint can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...
Microsoft SharePoint 输入验证错误漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation erro...
PT-2026-2757
CVE-2026-20958 Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. https://t.co/27qwZPmRNM...
PT-2026-2758
CVE-2026-20959 Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing … https://t.co/MJ9l4ETY51...
Microsoft SharePoint 跨站脚本漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scripting...
PT-2026-2747
🟠 CVE-2026-20947 - High Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. https://t.co/plm6gTTLxj https://t.co/1kjK6Hr4sV...
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...
Security Updates for Microsoft SharePoint Server 2016 (January 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2026-20947: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...