Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
MEDIUM 6.1
CVE-2017-8551
An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Micro…
Project Server
Patch available
MEDIUM 5.4
CVE-2017-8550EPSS 22%
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Busi…
Office
Patch available
MEDIUM 5.4
CVE-2017-8514
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Micro…
Sharepoint Enterprise Server
Patch available
MEDIUM 5.4
CVE-2017-0255
Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web re…
Sharepoint Foundation
Patch available
MEDIUM 5.4
CVE-2017-0195
Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Micr…
Excel Web App
Patch available
MEDIUM 6.1
CVE-2017-0107EPSS 7%
Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Mic…
Sharepoint Foundation
Patch available
MEDIUM 6.1
CVE-2017-0110EPSS 7%
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTM…
Exchange Server
Patch available
MEDIUM 6.1
CVE-2017-0055EPSS 16%
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gol…
Windows 10
Patch available
MEDIUM 6.1
CVE-2017-0017EPSS 42%
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive inform…
Edge
Patch available
MEDIUM 6.1
CVE-2016-7280EPSS 9%
Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ak…
Edge
Mitigation only
MEDIUM 6.1
CVE-2016-7282EPSS 10%
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary w…
Edge
Mitigation only
MEDIUM 6.1
CVE-2016-7206EPSS 12%
Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ak…
Edge
Mitigation only
MEDIUM 6.1
CVE-2016-7251EPSS 8%
Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML v…
Sql Server
Mitigation only
MEDIUM 6.1
CVE-2016-3379EPSS 8%
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web …
Exchange Server
Mitigation only
MEDIUM 6.1
CVE-2016-0039EPSS 7%
Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary…
Sharepoint Foundation
Mitigation only
MEDIUM 6.1
CVE-2016-0032EPSS 8%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulativ…
Exchange Server
Patch available
MEDIUM 6.1
CVE-2016-0031EPSS 8%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary we…
Exchange Server
Patch available
MEDIUM 6.1
CVE-2016-0030EPSS 8%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allow…
Exchange Server
Patch available
MEDIUM 6.1
CVE-2016-0029EPSS 8%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary we…
Exchange Server
Patch available
MEDIUM 5.4
CVE-2016-0011EPSS 5%
Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy res…
Sharepoint Server
Mitigation only
MEDIUM 6.1
CVE-2015-6117EPSS 7%
Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy res…
Sharepoint Foundation
Mitigation only
MEDIUM 6.1
CVE-2011-0096EPSS 47%
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2…
Windows 2003 Server
No fix yet
HIGH 9.3
CVE-2008-0454EPSS 25%
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows u…
Internet Explorer
after 3.6.0.244
HIGH 8.8
CVE-2007-4040EPSS 13%
Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduc…
Outlook
Mitigation only
MEDIUM 6.8
CVE-2007-0220EPSS 33%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attack…
Exchange Server
Patch available
MEDIUM 6.0
CVE-2006-3643EPSS 20%
Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resourc…
Ie
Patch available