Vulnerability index

Browse CVEs

3,025 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Exchange Server MEDIUM 6.8
CVE-2015-1771EPSS 6%

Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote a…

Mitigation only
Fix from $1,600 2015-06-10
Windows 2003 Server HIGH 7.2
CVE-2015-1768

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of serv…

Mitigation only
Fix from $1,950 2015-06-10
Office HIGH 9.3
CVE-2015-1760EPSS 16%

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code vi…

Mitigation only
Fix from $1,950 2015-06-10
Office Compatibility Pack HIGH 9.3
CVE-2015-1759EPSS 16%

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory…

Mitigation only
Fix from $1,950 2015-06-10
Windows Media Player HIGH 9.3
CVE-2015-1728EPSS 18%

Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows M…

Mitigation only
Fix from $1,950 2015-06-10
Sharepoint Foundation MEDIUM 6.0
CVE-2015-1700EPSS 12%

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote aut…

Mitigation only
Fix from $1,600 2015-05-13
Office HIGH 9.3
CVE-2015-1683EPSS 14%

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabi…

Mitigation only
Fix from $1,950 2015-05-13
Excel HIGH 9.3
CVE-2015-1682EPSS 19%

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, O…

Mitigation only
Fix from $1,950 2015-05-13
.net Framework HIGH 9.3
CVE-2015-1673EPSS 17%

The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted rem…

Mitigation only
Fix from $1,950 2015-05-13
.net Framework MEDIUM 5.0
CVE-2015-1672EPSS 18%

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performanc…

Mitigation only
Fix from $1,600 2015-05-13
Office Compatibility Pack HIGH 9.3
CVE-2015-1651EPSS 16%

Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary …

Mitigation only
Fix from $1,950 2015-04-14
Office HIGH 9.3
CVE-2015-1650EPSS 27%

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compati…

Mitigation only
Fix from $1,950 2015-04-14
Office HIGH 9.3
CVE-2015-1649EPSS 23%

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation …

Mitigation only
Fix from $1,950 2015-04-14
Exchange Server MEDIUM 5.0
CVE-2015-1631EPSS 9%

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange…

Mitigation only
Fix from $1,600 2015-03-11
Excel HIGH 9.3
CVE-2015-0097EPSS 41%

Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execut…

No fix yet
Fix from $1,950 2015-03-11
Office HIGH 9.3
CVE-2015-0086EPSS 13%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP…

Mitigation only
Fix from $1,950 2015-03-11
Excel HIGH 9.3
CVE-2015-0085EPSS 19%

Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, Power…

Mitigation only
Fix from $1,950 2015-03-11
Windows 2003 Server HIGH 7.2
CVE-2015-0075

The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain…

Mitigation only
Fix from $1,950 2015-03-11
Vbscript HIGH 9.3
CVE-2015-0032EPSS 22%

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execut…

Mitigation only
Fix from $1,950 2015-03-11
Web Applications HIGH 9.3
CVE-2015-0064EPSS 30%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, …

No fix yet
Fix from $1,950 2015-02-11
Word HIGH 9.3
CVE-2015-0065EPSS 30%

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office docum…

No fix yet
Fix from $1,950 2015-02-11
Windows 7 MEDIUM 6.1
CVE-2015-0006EPSS 12%

The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S…

Mitigation only
Fix from $1,600 2015-01-13
Windows 7 HIGH 7.2
CVE-2015-0004

The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi…

No fix yet
Fix from $1,950 2015-01-13
Windows 7 HIGH 7.2
CVE-2015-0002EPSS 14%

The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, …

No fix yet
Fix from $1,950 2015-01-13
Office HIGH 9.3
CVE-2014-6364EPSS 15%

Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to exe…

Mitigation only
Fix from $1,950 2014-12-11
Vbscript HIGH 9.3
CVE-2014-6363EPSS 28%

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execut…

No fix yet
Fix from $1,950 2014-12-11
Excel HIGH 9.3
CVE-2014-6361EPSS 13%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers t…

Mitigation only
Fix from $1,950 2014-12-11
Excel HIGH 9.3
CVE-2014-6360EPSS 13%

Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office documen…

Mitigation only
Fix from $1,950 2014-12-11
Office HIGH 9.3
CVE-2014-6357EPSS 14%

Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, O…

Mitigation only
Fix from $1,950 2014-12-11
Office Compatibility Pack HIGH 9.3
CVE-2014-6356EPSS 12%

Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via …

Mitigation only
Fix from $1,950 2014-12-11