Lucene search
+L

9022 matches found

OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1450

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...

5.4CVSS6.3AI score0.01604EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.26 views

CVE-2020-1450

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...

5.4CVSS0.01604EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.24 views

CVE-2020-1451

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456...

5.4CVSS0.01604EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.18 views

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint...

5.4CVSS0.01565EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.22 views

CVE-2020-1456

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451...

5.4CVSS0.02229EPSS
SaveExploits1References3
OSV
OSV
added 2020/07/14 11:15 p.m.9 views

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint...

5.4CVSS6.7AI score0.01565EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1456

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451...

5.4CVSS6.3AI score0.02229EPSS
SaveExploits1References3
OSV
OSV
added 2020/07/14 11:15 p.m.6 views

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'...

4.3CVSS7.2AI score0.0905EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1443

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...

5.4CVSS6.7AI score0.01654EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.36 views

CVE-2020-1439

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'...

8.8CVSS0.20265EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/14 11:15 p.m.8 views

CVE-2020-1439

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'...

8.8CVSS7.9AI score0.20265EPSS
SaveExploits0References2
NVD
NVD
added 2020/07/14 11:15 p.m.43 views

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'...

4.3CVSS0.0905EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.30 views

CVE-2020-1443

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...

5.4CVSS0.01654EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.47 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'...

7.8CVSS0.93966EPSS
SaveExploits10References6
OSV
OSV
added 2020/07/14 11:15 p.m.31 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'...

7.8CVSS8.1AI score
SaveExploits0References6
OSV
OSV
added 2020/07/14 11:15 p.m.9 views

CVE-2020-1025

An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...

9.8CVSS7.2AI score0.05853EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.26 views

CVE-2020-1025

An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...

9.8CVSS0.05853EPSS
SaveExploits0References1
Prion
Prion
added 2020/07/14 11:15 p.m.27 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456...

3.5CVSS5.1AI score0.02229EPSS
SaveExploits1References1Affected Software2
Prion
Prion
added 2020/07/14 11:15 p.m.34 views

Remote code execution

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'...

6.5CVSS8.9AI score0.20265EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2020/07/14 11:15 p.m.26 views

Remote code execution

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'...

4.3CVSS7.2AI score0.0905EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder