CVE-2021-31181

Public exploit
Microsoft SharePoint Remote Code Execution Vulnerability
Max CVSS
8.8
EPSS Score
28.29%
Published
2021-05-11
Updated
2023-08-02

CVE-2020-16952

Public exploit
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p> <p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p> <p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>
Max CVSS
8.6
EPSS Score
90.13%
Published
2020-10-16
Updated
2023-12-31

CVE-2020-1147

Known exploited
Public exploit
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Max CVSS
7.8
EPSS Score
86.03%
Published
2020-07-14
Updated
2022-07-12
CISA KEV Added
2021-11-03

CVE-2014-1761

Known exploited
Public exploit
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
Max CVSS
9.3
EPSS Score
61.45%
Published
2014-03-25
Updated
2018-10-30
CISA KEV Added
2022-02-15

CVE-2010-3964

Public exploit
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
Max CVSS
7.5
EPSS Score
97.06%
Published
2010-12-16
Updated
2018-10-12
Microsoft SharePoint Server Remote Code Execution Vulnerability
Max CVSS
7.8
EPSS Score
0.05%
Published
2024-03-12
Updated
2024-03-12
Microsoft SharePoint Server Remote Code Execution Vulnerability
Max CVSS
8.8
EPSS Score
0.19%
Published
2024-01-09
Updated
2024-01-12
Microsoft SharePoint Server Remote Code Execution Vulnerability
Max CVSS
6.8
EPSS Score
0.06%
Published
2023-11-14
Updated
2023-11-20
Microsoft SharePoint Server Information Disclosure Vulnerability
Max CVSS
6.5
EPSS Score
0.07%
Published
2023-08-08
Updated
2023-08-11
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
8.0
EPSS Score
0.05%
Published
2023-08-08
Updated
2023-08-11
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
8.0
EPSS Score
0.05%
Published
2023-08-08
Updated
2023-08-11
Microsoft SharePoint Server Information Disclosure Vulnerability
Max CVSS
6.5
EPSS Score
0.07%
Published
2023-08-08
Updated
2023-08-11
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Max CVSS
8.8
EPSS Score
0.05%
Published
2023-09-12
Updated
2023-09-14
Microsoft Word Remote Code Execution Vulnerability
Max CVSS
7.3
EPSS Score
0.09%
Published
2023-09-12
Updated
2023-09-14
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Max CVSS
7.5
EPSS Score
0.15%
Published
2023-07-11
Updated
2023-07-18
Microsoft SharePoint Server Remote Code Execution Vulnerability
Max CVSS
8.8
EPSS Score
0.22%
Published
2023-07-11
Updated
2023-07-13
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
8.8
EPSS Score
0.13%
Published
2023-07-11
Updated
2023-07-13
Microsoft SharePoint Remote Code Execution Vulnerability
Max CVSS
8.8
EPSS Score
0.22%
Published
2023-07-11
Updated
2023-07-13
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Max CVSS
6.5
EPSS Score
0.05%
Published
2023-06-14
Updated
2023-06-21
Microsoft SharePoint Server Remote Code Execution Vulnerability
Max CVSS
8.8
EPSS Score
0.22%
Published
2023-07-11
Updated
2023-07-13
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
6.3
EPSS Score
0.04%
Published
2023-06-14
Updated
2023-06-21
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
7.3
EPSS Score
0.05%
Published
2023-06-14
Updated
2023-06-21
Microsoft SharePoint Denial of Service Vulnerability
Max CVSS
6.5
EPSS Score
0.11%
Published
2023-06-14
Updated
2023-06-21

CVE-2023-29357

Known exploited
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Max CVSS
9.8
EPSS Score
48.40%
Published
2023-06-14
Updated
2024-01-11
CISA KEV Added
2024-01-10
Microsoft SharePoint Server Spoofing Vulnerability
Max CVSS
8.1
EPSS Score
0.28%
Published
2023-04-11
Updated
2023-08-02
393 vulnerabilities found
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!