Page 5 of 47 results (0.003 seconds)

CVSS: 9.3EPSS: 41%CPEs: 11EXPL: 0

CVE-2015-6106

https://notcve.org/view.php?id=CVE-2015-6106

09 Dec 2015 — The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability." La librería font de Windows en Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 20... • http://www.securitytracker.com/id/1034331 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 42%CPEs: 20EXPL: 0

CVE-2015-6107

https://notcve.org/view.php?id=CVE-2015-6107

09 Dec 2015 — The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability." La librería font Windows en Microsoft Win... • http://www.securitytracker.com/id/1034331 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 39%CPEs: 36EXPL: 0

CVE-2015-6108

https://notcve.org/view.php?id=CVE-2015-6108

09 Dec 2015 — The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6; Skype for Business 2016; Lync 2010; Lync 2013 SP1; Live Meeting 2007 Console; and Silverlight 5 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption V... • http://www.securitytracker.com/id/1034329 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.1EPSS: 14%CPEs: 7EXPL: 0

CVE-2015-6061

https://notcve.org/view.php?id=CVE-2015-6061

11 Nov 2015 — Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure Vulnerability." Vulnerabilidad de XSS en Microsoft Skype for Business 2016, Lync 2010 y 2013 SP1, Lync 2010 Attendee y Lync Room System permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a ... • http://www.securitytracker.com/id/1034126 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 31%CPEs: 44EXPL: 0

CVE-2015-2503

https://notcve.org/view.php?id=CVE-2015-2503

11 Nov 2015 — Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visi... • http://www.securitytracker.com/id/1034117 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.1EPSS: 14%CPEs: 2EXPL: 0

CVE-2015-2531

https://notcve.org/view.php?id=CVE-2015-2531

09 Sep 2015 — Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Information Disclosure Vulnerability." Vulnerabilidad de XSS en el motor jQuery en Microsoft Lync Server 2013 y Skype para Business Server 2015, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL mani... • http://www.securitytracker.com/id/1033497 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 9%CPEs: 2EXPL: 0

CVE-2015-2536

https://notcve.org/view.php?id=CVE-2015-2536

09 Sep 2015 — Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Elevation of Privilege Vulnerability." Vulnerabilidad de XSS en Microsoft Lync Server 2013 y Skype para Business Server 2015, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una URL manipulada, también conocida como 'Skype for Business Se... • http://www.securitytracker.com/id/1033497 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •