Where
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft SharePoint ServerMicrosoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-38024.

First published (updated )
Advisory
ZDI-24-1534

Microsoft SharePoint ServerZDI-24-1534: Microsoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability

Risk 23

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-38024.

First published (updated )
ZDI-CAN-24221

VirtoSoftware Sharepoint Bulk File DownloadPath Traversal, Infoleak

Risk 43
Severity
7.5
Path Traversal, Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter.

First published (updated )
CVE-2024-33881

VirtoSoftware Sharepoint Bulk File DownloadInfoleak

Risk 27
Severity
5.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive.

First published (updated )
CVE-2024-33880

VirtoSoftware Sharepoint Bulk File DownloadPath Traversal

Risk 86
Severity
9.8
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.

First published (updated )
CVE-2024-33879

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 70
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2024-30044

Microsoft SharePoint Server 2019Microsoft SharePoint Server Information Disclosure Vulnerability

Risk 43
Severity
7.5
XEE
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Information Disclosure Vulnerability

First published (updated )
CVE-2024-30043

Microsoft SharePoint Server 2019Microsoft SharePoint Server Spoofing Vulnerability

Risk 51
Severity
6.8
XSS
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:H/RL:O/RC:C

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2024-26251

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 51
Severity
7.8
EPSS
0.05%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21426

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 62
Severity
6.8
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-38177

Microsoft SharePoint Server 2019Microsoft SharePoint Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-36764

Microsoft Word 2016Microsoft Word Remote Code Execution Vulnerability

Risk 59
Severity
7.3
Input Validation
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C

Microsoft Word Remote Code Execution Vulnerability

First published (updated )
CVE-2023-36762

Microsoft SharePoint Server 2019Microsoft SharePoint Server Information Disclosure Vulnerability

Risk 38
Severity
6.5
SSRF
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Information Disclosure Vulnerability

First published (updated )
CVE-2023-24954

Microsoft SharePoint Server 2019Microsoft SharePoint Server Spoofing Vulnerability

Risk 38
Severity
6.5
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2023-24950

Microsoft SharePoint ServerMicrosoft SharePoint Chart Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability.

First published (updated )
Advisory
ZDI-23-546

Microsoft SharePoint ServerZDI-23-546: Microsoft SharePoint Chart Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability.

First published (updated )
ZDI-CAN-16664

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Spoofing Vulnerability

Risk 60
Severity
8.1
SSRF
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2023-28288

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Spoofing Vulnerability

Risk 17
Severity
3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2023-23395

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Security Feature Bypass Vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-21743

Microsoft SharePoint Foundation 2013Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21742

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21744

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-44690

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-44693

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41036, CVE-2022-41037, CVE-2022-41038.

1 / 2
First published (updated )
CVE-2022-38053

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-37961

Microsoft SharePoint Foundation 2013Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-38009

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-38008

Microsoft SharePoint Foundation 2013Microsoft SharePoint Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Remote Code Execution Vulnerability

First published (updated )
CVE-2022-35823

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203