Browse CVEs

MEDIUM 5.4 CVE-2026-21529 Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spo… Azure Hdinsight 5.1+ Fix from $1,6002026-02-10 MEDIUM 6.1 CVE-2026-21264 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform … Account Mitigation only Fix from $1,6002026-01-22 MEDIUM 5.4 CVE-2026-20959EPSS 7% Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19127.20442+ Fix from $1,6002026-01-13 CRITICAL 9.6 CVE-2025-64675 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform sp… Azure Cosmos Db Mitigation only Fix from $2,3002025-12-19 HIGH 8.2 CVE-2025-64677 Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker … Office Out Of Box Experience Mitigation only Fix from $1,9502025-12-18 CRITICAL 9.0 CVE-2025-64672 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19127.20378+ Fix from $2,3002025-12-09 MEDIUM 6.1 CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability 365 Defender Portal No fix yet Fix from $1,6002025-11-20 HIGH 8.7 CVE-2025-62210 Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized atta… Dynamics 365 8.8.139.398+ Fix from $1,9502025-11-11 HIGH 8.7 CVE-2025-62211 Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized atta… Dynamics 365 8.8.139.398+ Fix from $1,9502025-11-11 CRITICAL 9.3 CVE-2025-55321 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoo… Azure Monitor Mitigation only Fix from $2,3002025-10-09 MEDIUM 5.4 CVE-2025-49745 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized a… Dynamics 365 9.1.38.10+ Fix from $1,6002025-08-12 HIGH 8.2 CVE-2025-47977 Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platform allows an unauthorized att… Nuance Digital Engagement Platform 5.64.x+ Fix from $1,9502025-06-10 MEDIUM 6.3 CVE-2025-21393 Microsoft SharePoint Server Spoofing Vulnerability Sharepoint Server 16.0.17928.20356+ Fix from $1,6002025-01-14 MEDIUM 6.1 CVE-2024-54138 NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Ma… Nugetgallery 2024.12.06+ Fix from $1,6002024-12-06 HIGH 7.6 CVE-2024-49053 Microsoft Dynamics 365 Sales Spoofing Vulnerability Dynamics 365 Sales 3.24104.15+ Fix from $1,9502024-11-26 CRITICAL 9.6 CVE-2024-49038 Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation… Copilot Studio Mitigation only Fix from $2,3002024-11-26 HIGH 8.1 CVE-2024-43573 KEVEPSS 44% Windows MSHTML Platform Spoofing Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-43481 Power BI Report Server Spoofing Vulnerability Power Bi Report Server 15.0.1116.121+ Fix from $1,9502024-10-08 MEDIUM 6.1 CVE-2024-47604 NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes… Nugetgallery 2024.09.25+ Fix from $1,6002024-10-01 MEDIUM 5.4 CVE-2024-43476 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Dynamics 365 9.1.32+ Fix from $1,6002024-09-10 MEDIUM 6.1 CVE-2024-38208 Microsoft Edge for Android Spoofing Vulnerability Edge 128.0.2739.42+ Fix from $1,6002024-08-22 HIGH 8.2 CVE-2024-38211 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Dynamics 365 Patch available Fix from $1,9502024-08-13 CRITICAL 9.3 CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability Azure Stack Hub 1.2311.1.22+ Fix from $2,3002024-08-13 MEDIUM 6.1 CVE-2024-38166 An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network… Dynamics Crm Service Portal Web Resource Patch available Fix from $1,6002024-08-06 MEDIUM 6.1 CVE-2024-38156 Microsoft Edge (Chromium-based) Spoofing Vulnerability Edge 126.0.2592.102+ Fix from $1,6002024-07-19 HIGH 7.6 CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability Azure Devops Server Patch available Fix from $1,9502024-07-09 HIGH 7.6 CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability Azure Devops Server Patch available Fix from $1,9502024-07-09 MEDIUM 6.1 CVE-2024-37304 NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Ma… Nugetgallery 2024.05.28+ Fix from $1,6002024-06-12 MEDIUM 5.4 CVE-2024-30053 Azure Migrate Cross-Site Scripting Vulnerability Azure Migrate 6.1.294.1008+ Fix from $1,6002024-05-14 MEDIUM 5.4 CVE-2024-21419 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Dynamics 365 9.1.26+ Fix from $1,6002024-03-12