Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: microsoft'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2010-3888 7.2 Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers 2010-10-11 04:00:00
CVE-2010-2088 4.3 ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks against the form control via the __VIEWSTATE parameter. 2010-05-28 04:00:00
CVE-2010-2085 4.3 The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the __VIEWSTATE parameter. 2010-05-28 04:00:00
CVE-2010-2084 4.3 Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute. 2010-05-28 04:00:00
CVE-2010-2083 4.0 Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors. 2010-05-27 04:00:00
CVE-2010-2011 4.0 Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents. 2010-05-24 04:00:00
CVE-2009-2196 5.0 Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors. 2009-08-18 04:00:00
CVE-2009-2668 7.8 Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a rela 2009-08-06 04:00:00
CVE-2008-6819 4.7 win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vu 2009-06-29 04:00:00
CVE-2007-6357 5.8 Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether thi 2008-11-15 07:04:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/2317
Zapisa po stranici: