37076 matches found
CVE-2026-69615
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69417
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69402
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69361
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-69356
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-62759
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network...
EUVD-2026-73922
Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-84003
Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...
CVE-2018-5354
CVE-2018-5354 ANIXIS密码重置客户端权限提升/远程代码执行 信息 供应商: ANIXIS 产品: ANIXIS密码重置客户端 受影响版本: 3.22之前版本 研究人员: Jason Juntunen 又名 @missing0x00 https://github.com/missing0x00 CVSS: 8.8 描述 ANIXIS密码重置客户端3.22之前版本中的自定义GINA/CP模块允许远程攻击者通过欺骗执行代码和提升权限。...
CVE-2026-69615
CVE-2026-69615 is an improper neutralization of input during web page generation (cross-site scripting) vulnerability in Microsoft Office SharePoint . An authorized attacker with high privileges and required user interaction can perform spoofing over a network . NVD rates it 4.8 (MEDIUM) ; Micros...
EUVD-2026-73712
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69417
CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...
EUVD-2026-73696
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69402
CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...
EUVD-2026-73694
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73643
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-64918
CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials , allowing an unauthorized attacker to perform spoofing over a network. The attack requires user interaction but needs no prior privileges and has low complexity , with a high impact on c...
CVE-2026-69680
CVE-2026-69680 is an origin validation error in Windows DNS that allows an unauthorized network attacker to perform spoofing . Microsoft rates the vulnerability CVSS 8.1 (High) with a network attack vector, high complexity, no required privileges, and no user interaction, resulting in high impact...