Microsoft Sharepoint (Microsoft) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-01-08. Vendor: Microsoft.

CVEs of Microsoft Sharepoint

• CVE-2019-0585 - CVSS 8.8 (high), 2019-01-08: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
• CVE-2019-0557 - CVSS 5.4 (medium), 2019-01-08: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2019-0556 - CVSS 5.4 (medium), 2019-01-08: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2019-0562 - CVSS 5.4 (medium), 2019-01-08: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2019-0558 - CVSS 5.4 (medium), 2019-01-08: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8650 - CVSS 5.4 (medium), 2018-12-12: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8635 - CVSS 8.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an…
• CVE-2018-8628 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft…
• CVE-2018-8580 - CVSS 4.3 (medium), 2018-12-12: An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search…
• CVE-2018-8572 - CVSS 5.4 (medium), 2018-11-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8568 - CVSS 5.4 (medium), 2018-11-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8578 - CVSS 4.3 (medium), 2018-11-14: An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages,…
• CVE-2018-8518 - CVSS 5.4 (medium), 2018-10-10: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8498 - CVSS 5.4 (medium), 2018-10-10: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8488 - CVSS 5.4 (medium), 2018-10-10: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8480 - CVSS 5.4 (medium), 2018-10-10: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8431 - CVSS 5.4 (medium), 2018-09-13: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8428 - CVSS 5.4 (medium), 2018-09-13: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8426 - CVSS 5.4 (medium), 2018-09-13: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8378 - CVSS 5.5 (medium), 2018-08-15: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose…
• CVE-2018-8323 - CVSS 5.4 (medium), 2018-07-11: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8299 - CVSS 5.4 (medium), 2018-07-11: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8300 - CVSS 8.8 (high), 2018-07-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
• CVE-2018-8254 - CVSS 5.4 (medium), 2018-06-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8252 - CVSS 5.4 (medium), 2018-06-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8149 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8161 - CVSS 7.8 (high), 2018-05-09: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office…
• CVE-2018-8156 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8155 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-8168 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-1028 - CVSS 8.8 (high), 2018-04-12: A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office…
• CVE-2018-1034 - CVSS 5.4 (medium), 2018-04-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-1032 - CVSS 5.4 (medium), 2018-04-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-1014 - CVSS 5.4 (medium), 2018-04-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
• CVE-2018-1005 - CVSS 5.4 (medium), 2018-04-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…