sharepoint server · threatengine.sh

Home/Product/microsoft sharepoint server

Product

microsoft sharepoint server

476 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20280

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20210

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

< 16.0.19725.20210

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an auth

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20076

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

< 16.0.19725.20076

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19725.20076

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unau

< 16.0.19127.20518

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

< 16.0.19127.20518

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform

< 16.0.19127.20442

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

< 16.0.19127.20442

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an auth

< 16.0.19127.20442

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a net

< 16.0.19127.20442

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

< 16.0.19127.20442

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an auth

< 16.0.19127.20442

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

< 16.0.19127.20378

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an auth

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

< 16.0.19127.20338

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.19127.20262

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.19127.20262

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

< 16.0.19127.20100

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.18526.20518

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.18526.20508

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

< 16.0.18526.20508

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over

< 16.0.18526.20424

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

< 16.0.18526.20424

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

<= 16.0.18526.20396

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an auth

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

< 16.0.18526.20396

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.18526.20396

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.18526.20286

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

< 16.0.18526.20286

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

< 16.0.18526.20286

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

< 16.0.18526.20286

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.

< 16.0.18526.20172

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

< 16.0.18526.20172

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

< 16.0.10417.20003

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

< 16.0.17928.20396

Microsoft SharePoint Server Remote Code Execution Vulnerability

< 16.0.17928.20356

Microsoft SharePoint Server Spoofing Vulnerability

< 16.0.17928.20356

Microsoft SharePoint Server Remote Code Execution Vulnerability

< 16.0.17928.20356

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Denial of Service Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

< 16.0.17328.20362

Microsoft SharePoint Server Remote Code Execution Vulnerability

< 16.0.17328.20292

Microsoft SharePoint Server Remote Code Execution Vulnerability

< 16.0.17328.20292

Microsoft SharePoint Server Information Disclosure Vulnerability

< 16.0.17328.20246

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Denial of Service Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Denial of Service Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected Share

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data inpu

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who succes

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsaf

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who succes

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an a

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially craft

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An att

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoi

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check t

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized va

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to

An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OA

An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacke

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerabi

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe A

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted aut

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulne

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe A

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoi

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the Sh

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a spec

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input,

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input,

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting i

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerabi

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), all

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an appl

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "M

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Informat

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted aut

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects i

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized var

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulne

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "M

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Prot

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized va

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framewo

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in me

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in me

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 an

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly saniti

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted we

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Off

A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory,

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Offi

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Micr

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Service

Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remo

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on Shar

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remo

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Service

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Service

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Autom

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel View

Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote at

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Excel for Mac 2011, Word

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016

Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word A

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1,

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on S

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 201

The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and

Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 a

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word View

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, O

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Service

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoi

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, O

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote

Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2

Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote att

Use-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2,

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 S

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Vie

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Found

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Co

Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Ex

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010

Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2

Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibilit

Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Fou

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Ser

Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted we

Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Ma

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Wo

Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, W

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Wo

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Wo

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Wo

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to injec

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attacke

The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Off

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2

Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process una

Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 20

Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obt

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a deni

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attacke

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web s

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restriction

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to ex

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to ex

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2

Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP

Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to ar

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1

Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do

Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundatio

Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint F

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 20

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Offic

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2,

Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2

Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 201

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010,

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2

Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function

The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0

Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 200

Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlie

_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number

The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote a

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploade

Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office

Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Offic

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin