Browse CVEs

HIGH 9.3 CVE-2013-3131EPSS 22% Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidim… .net Framework Mitigation only Fix from $1,9502013-07-10 HIGH 7.8 CVE-2013-3129EPSS 32% Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWr… .net Framework Mitigation only Fix from $1,9502013-07-10 HIGH 10.0 CVE-2013-1318EPSS 26% Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointe… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 10.0 CVE-2013-1319EPSS 25% Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary co… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 10.0 CVE-2013-1320EPSS 29% Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 10.0 CVE-2013-1322EPSS 25% Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publishe… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1316EPSS 22% Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1317EPSS 21% Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an impr… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1321EPSS 22% Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1323EPSS 21% Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1327EPSS 21% Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1328EPSS 21% Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers inc… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1329EPSS 21% Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 9.3 CVE-2013-1335EPSS 21% Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape C… Word Mitigation only Fix from $1,9502013-05-15 HIGH 7.5 CVE-2013-1337EPSS 21% Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication i… .net Framework Mitigation only Fix from $1,9502013-05-15 MEDIUM 5.0 CVE-2013-1336EPSS 19% The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote… .net Framework Mitigation only Fix from $1,6002013-05-15 HIGH 9.3 CVE-2013-1302EPSS 22% Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote att… Lync Mitigation only Fix from $1,9502013-05-15 MEDIUM 6.8 CVE-2013-0096EPSS 16% Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL p… Windows Essentials Mitigation only Fix from $1,6002013-05-15 HIGH 9.3 CVE-2013-1296EPSS 21% The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memor… Remote Desktop Connection Mitigation only Fix from $1,9502013-04-09 HIGH 7.2 CVE-2013-0078 The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users… Windows Defender Mitigation only Fix from $1,9502013-04-09 MEDIUM 5.0 CVE-2013-1282EPSS 27% The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), an… Active Directory Mitigation only Fix from $1,6002013-04-09 MEDIUM 5.8 CVE-2013-1299EPSS 9% Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e-mail message. Modern Mail Mitigation only Fix from $1,6002013-03-29 HIGH 9.3 CVE-2013-0079EPSS 27% Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation,… Office Filter Pack Mitigation only Fix from $1,9502013-03-13 HIGH 7.8 CVE-2013-0085EPSS 34% Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP… Sharepoint Foundation Mitigation only Fix from $1,9502013-03-13 HIGH 7.5 CVE-2013-0080EPSS 19% Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and … Sharepoint Foundation Mitigation only Fix from $1,9502013-03-13 HIGH 7.5 CVE-2013-0084EPSS 21% Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intend… Sharepoint Foundation Mitigation only Fix from $1,9502013-03-13 MEDIUM 5.0 CVE-2013-0086EPSS 24% Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive infor… Sharepoint Foundation Mitigation only Fix from $1,6002013-03-13 MEDIUM 5.0 CVE-2013-0095EPSS 21% Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote UR… Office Mitigation only Fix from $1,6002013-03-13 HIGH 10.0 CVE-2013-0073EPSS 30% The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a… .net Framework Mitigation only Fix from $1,9502013-02-13 MEDIUM 6.8 CVE-2013-0418EPSS 8% Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers … Exchange Server Mitigation only Fix from $1,6002013-01-17