Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 678

Export CSV
CVE-2012-2528

Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 22.1% KEV · Not listed
Vendors
Microsoft
Products
Office Compatibility Pack Office Web Apps Sharepoint Server and 3 more
CVE-2013-0006

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."

CVSS 3.1 · 8.8 High EPSS 28.1% KEV · Not listed
Vendors
Microsoft
Products
Expression Web Groove Server Office and 12 more
CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 31.6% KEV · Not listed
Vendors
Microsoft
Products
Expression Web Groove Server Office and 12 more
CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."

CVSS 2.0 · 7.5 High EPSS 19.3% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2013-0081

Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."

CVSS 2.0 · 5.0 Medium EPSS 78.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Portal Server Sharepoint Server and 1 more
CVE-2013-0083

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 14.3% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2013-0084

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."

CVSS 2.0 · 7.5 High EPSS 21.3% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2013-0086

Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."

CVSS 2.0 · 5.0 Medium EPSS 24.0% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2023-33157

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 38.2% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Server