CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-28288HIGH | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server Spoofing Vulnerability CWE-918Apr 11, 2023 | CVSS8.1v3.1 | EPSS6.23% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server Spoofing Vulnerability CWE-601Mar 14, 2023 | CVSS3.1v3.1 | EPSS0.605% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-21717HIGH | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Elevation of Privilege Vulnerability CWE-284Feb 14, 2023 | CVSS8.8v3.1 | EPSS1.1% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21716CRITICAL | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Word Remote Code Execution Vulnerability CWE-190Feb 14, 2023 | CVSS9.8v3.1 | EPSS82.3% | PoCs12 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21744HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21742. CWE-502Jan 10, 2023 | CVSS8.8v3.1 | EPSS2.84% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21742HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21744. CWE-284Jan 10, 2023 | CVSS8.8v3.1 | EPSS55.8% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44690HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-44693. Dec 13, 2022 | CVSS8.8v3.1 | EPSS82.1% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44693HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-44690. Dec 13, 2022 | CVSS8.8v3.1 | EPSS1.94% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-41062HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. Nov 9, 2022 | CVSS8.8v3.1 | EPSS1.51% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-41122MEDIUM | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server Spoofing Vulnerability. Nov 9, 2022 | CVSS6.5v3.1 | EPSS1.46% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-41036HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41037, CVE-2022-41038. Oct 11, 2022 | CVSS8.8v3.1 | EPSS1.68% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-38053HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41036, CVE-2022-41037, CVE-2022-41038. Oct 11, 2022 | CVSS8.8v3.1 | EPSS76.4% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-41038HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41036, CVE-2022-41037. Oct 11, 2022 | CVSS8.8v3.1 | EPSS2.83% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-41037HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41036, CVE-2022-41038. Oct 11, 2022 | CVSS8.8v3.1 | EPSS1.68% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-38009HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-37961, CVE-2022-38008. Sep 13, 2022 | CVSS8.8v3.1 | EPSS1.71% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-38008HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-37961, CVE-2022-38009. Sep 13, 2022 | CVSS8.8v3.1 | EPSS1.63% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-37961HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38008, CVE-2022-38009. Sep 13, 2022 | CVSS8.8v3.1 | EPSS50% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35823HIGH | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Remote Code Execution Vulnerability. Sep 13, 2022 | CVSS8.8v3.1 | EPSS52.9% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-30158HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30157. Jun 15, 2022 | CVSS8.8v3.1 | EPSS3.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-29108HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. May 10, 2022 | CVSS8.8v3.1 | EPSS11.9% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-24472HIGH | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server Spoofing Vulnerability. Apr 15, 2022 | CVSS8.0v3.1 | EPSS1.88% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-21968MEDIUM | Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Server Security Feature BypassVulnerability. CWE-287Feb 9, 2022 | CVSS4.3v3.1 | EPSS2.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-21840HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability. CWE-94Jan 11, 2022 | CVSS8.8v3.1 | EPSS3.1% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-21837HIGH | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Remote Code Execution Vulnerability. CWE-94Jan 11, 2022 | CVSS8.3v3.1 | EPSS3.02% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-43242HIGH | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-42320. CWE-20Dec 15, 2021 | CVSS7.6v3.1 | EPSS1.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |