8579 matches found
CVE-2025-64672
CVE-2025-64672 is a cross-site scripting issue in Microsoft Office SharePoint (and related SharePoint Server components) caused by improper neutralization of input during web page generation. An authorized attacker can spoof the user interface over a network, potentially compromising user experie...
EUVD-2025-202205
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 - Includes vulnerablity fix for Java SE related to the JAXP component and Security component CVE-2025-53066 and CVE-2025-53057 Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related ...
Description of the security update for SharePoint Server 2016 Language Pack: December 9, 2025 (KB5002804)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: December 9, 2025 (KB5002802)
None None...
Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)
None None...
Description of the security update for SharePoint Server 2019: December 9, 2025 (KB5002816)
None None...
Description of the security update for SharePoint Server Subscription Edition: December 9, 2025 (KB5002815)
None None...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another...
Microsoft SharePoint 跨站脚本漏洞
Microsoft SharePoint is a set of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...
KLA90810 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
PT-2025-50202
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists in Microsoft Office SharePoint related to improper neutralization of input during web page generation, leading to a cross-site scripting condition. This...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code on a system...
Security Updates for Microsoft SharePoint Server 2016 (December 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server 2019 (December 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization
Proof of concept exploit for Microsoft SharePoint server that chains authentication bypass with unsafe deserialization to achieve complete system compromise without authentication...
📄 Microsoft Sharepoint Authentication Bypass
This is a proof of concept exploit for a Microsoft Sharepoint authentication bypass vulnerability discovered in 2023. ============================================================================================================================================= | Title : SharePoint Authentication...