CVSS: 7.5EPSS: 5%CPEs: 22EXPL: 0CVE-2011-1258
https://notcve.org/view.php?id=CVE-2011-1258
16 Jun 2011 — Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different (1) domain or (2) zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability." Microsoft Internet Explorer 6 hasta la 8, no restringe correctamente el script web, permitiendo a atacantes remotos asistidos por el usuario obtener información confidencial de otro (1) dominio o (2) zona a tra... • http://blogs.technet.com/b/msrc/archive/2011/06/09/june-advance-notification-service-and-10-immutable-laws-revisited.aspx • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 6.1EPSS: 3%CPEs: 7EXPL: 0CVE-2011-1264
https://notcve.org/view.php?id=CVE-2011-1264
16 Jun 2011 — Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Active Directory Certificate Services Web Enrollment en Microsoft Windows Server 2003 SP2 y Server 2008 Gold, SP2, ... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-051 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 37%CPEs: 17EXPL: 0CVE-2011-1268
https://notcve.org/view.php?id=CVE-2011-1268
16 Jun 2011 — The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability." El cliente SMB de Microsoft Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista SP1 y SP2, Windows Server 2008 Gold, SP2, R2 y R2 SP1, y Windows 7 Gold SP1 permite a servidores remotos... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-043 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 31%CPEs: 16EXPL: 0CVE-2011-0658
https://notcve.org/view.php?id=CVE-2011-0658
16 Jun 2011 — Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability." Desbordamiento inferior de búfer en la implementación del protocolo OLE Automation en VBScript.dll en Microsoft Windows XP SP2 y SP3, Windows Server ... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-038 • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 19%CPEs: 62EXPL: 0CVE-2011-0664
https://notcve.org/view.php?id=CVE-2011-0664
16 Jun 2011 — Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability." El framework Microsoft .NET 2.0 SP1 y SP2... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-039 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 34%CPEs: 15EXPL: 0CVE-2011-1869
https://notcve.org/view.php?id=CVE-2011-1869
16 Jun 2011 — The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability." La implementación Distributed File System (DFS) en Microsoft Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista SP1 y SP2, Windows Server 2008 Go... • http://secunia.com/advisories/44894 • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 33%CPEs: 10EXPL: 0CVE-2011-1873
https://notcve.org/view.php?id=CVE-2011-1873
16 Jun 2011 — win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability." win32k.sys en los controladores (drivers) que se encuentren en modo-núcleo (kernel) de Micr... • http://secunia.com/advisories/44893 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 20%CPEs: 16EXPL: 0CVE-2011-1894
https://notcve.org/view.php?id=CVE-2011-1894
16 Jun 2011 — The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability." Manejador del protocol... • http://www.securityfocus.com/bid/48205 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 31%CPEs: 16EXPL: 6CVE-2011-1249 – Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
https://notcve.org/view.php?id=CVE-2011-1249
16 Jun 2011 — The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability." La función del controlador auxiliar (AFD)en afd.sys de Microsoft Windows XP SP2 y SP3, Windows Server 2003 SP2, Windo... • https://packetstorm.news/files/id/139196 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 84%CPEs: 22EXPL: 1CVE-2011-1255 – Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)
https://notcve.org/view.php?id=CVE-2011-1255
16 Jun 2011 — The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability." La implantación de extensiones multimedia interactivas temporizadas ("Timed Interactive Multimedia Extensions" o HTML+TIME) en Microsoft Internet Explorer 6 hasta... • https://www.exploit-db.com/exploits/20547 • CWE-908: Use of Uninitialized Resource •