Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-49706 KEV |
|
[KEV] Authentication Bypass in Microsoft sharepoint (CVE-2025-49706)
authentication bypass in Microsoft sharepoint (CVE-2025-49706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-21717 |
|
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
|
| CVE-2023-21716 |
|
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
|
| CVE-2022-41122 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2022-41103 |
|
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
|
| CVE-2022-41062 |
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
| CVE-2022-41060 |
|
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
|
| CVE-2022-41061 |
|
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
|
| CVE-2022-21840 |
|
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
|
| CVE-2021-40442 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2021-38652 |
|
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38651.
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38651.
|
| CVE-2021-38651 |
|
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
|
| CVE-2021-36940 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2021-27052 |
|
Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
|
| CVE-2021-24104 |
|
Microsoft SharePoint Spoofing Vulnerability
Microsoft SharePoint Spoofing Vulnerability
|
| CVE-2020-1100 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1100)
cross-site scripting in microsoft (CVE-2020-1100). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1107 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1107)
cross-site scripting in microsoft (CVE-2020-1107). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1106 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1106)
cross-site scripting in microsoft (CVE-2020-1106). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1105 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1105)
cross-site scripting in microsoft (CVE-2020-1105). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1104 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1104)
cross-site scripting in microsoft (CVE-2020-1104). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1103 |
|
Information Disclosure in csrf (CVE-2020-1103)
vulnerability in csrf (CVE-2020-1103). Confidential information can be exposed externally.
|
| CVE-2020-1102 |
|
Unrestricted File Upload in microsoft (CVE-2020-1102)
vulnerability in microsoft (CVE-2020-1102). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1101 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1101)
cross-site scripting in microsoft (CVE-2020-1101). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1099 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1099)
cross-site scripting in microsoft (CVE-2020-1099). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1069 |
|
Buffer Overflow in csharp (CVE-2020-1069)
vulnerability in csharp (CVE-2020-1069). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1024 |
|
Unrestricted File Upload in microsoft (CVE-2020-1024)
vulnerability in microsoft (CVE-2020-1024). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1023 |
|
Unrestricted File Upload in microsoft (CVE-2020-1023)
vulnerability in microsoft (CVE-2020-1023). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11936 |
|
Vulnerability in microsoft (CVE-2017-11936)
vulnerability in microsoft (CVE-2017-11936). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11876 |
|
Cross-Site Request Forgery (CSRF) in microsoft (CVE-2017-11876)
vulnerability in microsoft (CVE-2017-11876). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11820 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-11820)
cross-site scripting in microsoft (CVE-2017-11820). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11777 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-11777)
cross-site scripting in microsoft (CVE-2017-11777). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11775 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-11775)
cross-site scripting in microsoft (CVE-2017-11775). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8742 |
|
Buffer Overflow in microsoft (CVE-2017-8742)
vulnerability in microsoft (CVE-2017-8742). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8514 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-8514)
cross-site scripting in microsoft (CVE-2017-8514). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8512 |
|
Vulnerability in microsoft (CVE-2017-8512)
vulnerability in microsoft (CVE-2017-8512). Successful exploitation can lead to full system takeover.
|