Lucene search

K
MicrosoftSharepoint Enterprise Server

255 matches found

CVE
CVE
added 2020/05/21 11:15 p.m.130 views

CVE-2020-1023

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1024, CVE-2020-1102.

8.8CVSS8.3AI score0.46247EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.129 views

CVE-2019-1295

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1296.

8.8CVSS8.8AI score0.38462EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.129 views

CVE-2022-41122

Microsoft SharePoint Server Spoofing Vulnerability

6.5CVSS6.2AI score0.02749EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.126 views

CVE-2021-1641

Microsoft SharePoint Server Spoofing Vulnerability

5.8CVSS5.5AI score0.00978EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.126 views

CVE-2021-1707

Microsoft SharePoint Server Remote Code Execution Vulnerability

9CVSS8.8AI score0.07046EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.123 views

CVE-2020-0973

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.122 views

CVE-2020-1495

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administ...

9.3CVSS8.7AI score0.15901EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.120 views

CVE-2020-1501

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.The attacke...

5.5CVSS6.2AI score0.01772EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.119 views

CVE-2019-0957

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958.

8.8CVSS8.4AI score0.08939EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.119 views

CVE-2020-0976

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977.

5.4CVSS5.3AI score0.00612EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.119 views

CVE-2020-0980

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

9.3CVSS8.3AI score0.33652EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.119 views

CVE-2020-16953

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an attacker would have...

6.5CVSS6.8AI score0.14182EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.118 views

CVE-2021-40485

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.0082EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.118 views

CVE-2022-37961

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.43041EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.117 views

CVE-2020-0954

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.117 views

CVE-2020-1107

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1105.

5.4CVSS5.4AI score0.00675EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.117 views

CVE-2022-41061

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00262EPSS
CVE
CVE
added 2025/04/08 6:16 p.m.117 views

CVE-2025-27747

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

7.8CVSS7.8AI score0.00139EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.115 views

CVE-2020-0930

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.114 views

CVE-2020-0892

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.114 views

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

5.5CVSS6AI score0.25236EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.113 views

CVE-2020-16948

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an attacker would have...

6.5CVSS6.8AI score0.15076EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.112 views

CVE-2020-1177

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298...

5.4CVSS5.1AI score0.01048EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.112 views

CVE-2021-24066

Microsoft SharePoint Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01628EPSS
CVE
CVE
added 2025/04/08 6:16 p.m.112 views

CVE-2025-29794

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

8.8CVSS7.4AI score0.00322EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.111 views

CVE-2020-1503

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special documen...

5.5CVSS6.3AI score0.25763EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.111 views

CVE-2020-16946

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint ...

8.7CVSS7.5AI score0.006EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.111 views

CVE-2021-1716

Microsoft Word Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.03413EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.110 views

CVE-2019-1261

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Micr...

8.8CVSS8.2AI score0.05041EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.109 views

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS7.8AI score0.01282EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.108 views

CVE-2020-0795

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint R...

5.4CVSS5.3AI score0.00622EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.108 views

CVE-2020-1224

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special docume...

5.5CVSS5.9AI score0.21879EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.107 views

CVE-2020-0926

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.107 views

CVE-2020-0971

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, C...

8.8CVSS8.3AI score0.28468EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.107 views

CVE-2020-16941

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page.To take advantage of th...

5.5CVSS5.1AI score0.00333EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.107 views

CVE-2021-1726

Microsoft SharePoint Server Spoofing Vulnerability

8CVSS8AI score0.01999EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.106 views

CVE-2020-1345

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint ...

7.4CVSS7.3AI score0.00536EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.106 views

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.

4.3CVSS7AI score0.19485EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.106 views

CVE-2021-24072

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.01983EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.105 views

CVE-2019-1203

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint ...

5.4CVSS5.2AI score0.00529EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.105 views

CVE-2020-0920

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971, C...

8.8CVSS8.3AI score0.28468EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.105 views

CVE-2020-1439

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

8.8CVSS9.2AI score0.24597EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.104 views

CVE-2018-8284

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microso...

9.3CVSS7.3AI score0.50205EPSS
CVE
CVE
added 2019/04/09 3:29 a.m.104 views

CVE-2019-0778

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

5.4CVSS5.7AI score0.00486EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.104 views

CVE-2020-0923

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.104 views

CVE-2021-38652

Microsoft SharePoint Server Spoofing Vulnerability

7.6CVSS5.2AI score0.01283EPSS
CVE
CVE
added 2025/04/08 6:16 p.m.104 views

CVE-2025-29793

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

7.2CVSS7.4AI score0.03417EPSS
CVE
CVE
added 2017/01/10 9:59 p.m.103 views

CVE-2017-0003

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

9.3CVSS7.6AI score0.33607EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.103 views

CVE-2020-1218

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the fi...

8.8CVSS7.7AI score0.10314EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.103 views

CVE-2020-1447

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.

8.8CVSS8.8AI score0.43263EPSS
Total number of security vulnerabilities255