283 matches found
CVE-2019-0604
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVE-2020-1147
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsof...
CVE-2023-21716
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-22005
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2020-1025
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access.To exploit this vulnerability, an ...
CVE-2018-8628
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, ...
CVE-2023-36764
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2020-0894
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893.
CVE-2020-0929
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971, C...
CVE-2020-16952
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoin...
CVE-2023-24955
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-1210
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoin...
CVE-2020-1181
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
CVE-2020-0932
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0971, C...
CVE-2019-1006
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
CVE-2022-21968
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2022-29108
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21400
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-16951
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoin...
CVE-2019-0594
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
CVE-2021-31181
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2024-21426
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-0931
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, C...
CVE-2021-41344
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-30172
Microsoft Office Information Disclosure Vulnerability
CVE-2023-21742
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-31950
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-24954
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-38177
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-21743
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2021-40486
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-1446
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-0974
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, C...
CVE-2024-21318
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40487
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-28474
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-33165
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2023-23395
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-1102
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024.
CVE-2023-24950
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-0927
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...
CVE-2021-36940
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-28288
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-34520
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34467
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34468
Microsoft SharePoint Server Remote Code Execution Vulnerability