WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 131 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC
131matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 131 100.0% Withdrawn CVE 0 0.0%
Critical 12 9.2% High 91 69.5% Medium 25 19.1% Low 3 2.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 131 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 131 100.0% No public exploit 0 0.0%
split by peak 16 / year
Not applicable: 131 Low: 3Medium: 25High: 91Critical: 12 not blocked: 131 Forecast only: 131
19971 Not applicable1 Low1 not blocked1 Forecast only1 19980 19990 20000 20011 Not applicable1 Medium1 not blocked1 Forecast only1 20027 Not applicable7 Critical1 High3 Medium2 Low1 not blocked7 Forecast only7 20030 20040 20053 Not applicable3 High2 Medium1 not blocked3 Forecast only3 20063 Not applicable3 High3 not blocked3 Forecast only3 20074 Not applicable4 High4 not blocked4 Forecast only4 20085 Not applicable5 High5 not blocked5 Forecast only5 20092 Not applicable2 Medium2 not blocked2 Forecast only2 20106 Not applicable6 High6 not blocked6 Forecast only6 20112 Not applicable2 Critical1 High1 not blocked2 Forecast only2 20128 Not applicable8 High3 Medium5 not blocked8 Forecast only8 20138 Not applicable8 High6 Medium2 not blocked8 Forecast only8 20141 Not applicable1 Medium1 not blocked1 Forecast only1 20155 Not applicable5 High3 Medium2 not blocked5 Forecast only5 20167 Not applicable7 Critical1 High4 Medium1 Low1 not blocked7 Forecast only7 20173 Not applicable3 Critical1 High2 not blocked3 Forecast only3 20183 Not applicable3 Critical1 High1 Medium1 not blocked3 Forecast only3 201911 Not applicable11 Critical5 High3 Medium3 not blocked11 Forecast only11 20205 Not applicable5 High5 not blocked5 Forecast only5 202111 Not applicable11 Critical1 High9 Medium1 not blocked11 Forecast only11 202210 Not applicable10 High10 not blocked10 Forecast only10 202316 Not applicable16 Critical1 High13 Medium2 not blocked16 Forecast only16 20247 Not applicable7 High6 Medium1 not blocked7 Forecast only7 20252 Not applicable2 High2 not blocked2 Forecast only2
1998200120042007201020132016201920222025
131 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2025-29971 High 2025-05-13 Not applicable Forecast only Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
CVE-2025-21285 High 2025-01-14 Not applicable Forecast only Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2024-43642 High 2024-11-12 Not applicable Forecast only Windows SMB Denial of Service Vulnerability
CVE-2024-38018 High 2024-09-10 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-38030 Medium 2024-07-09 Not applicable Forecast only Windows Themes Spoofing Vulnerability
CVE-2024-30044 High 2024-05-14 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-26256 High 2024-04-09 Not applicable Forecast only Libarchive Remote Code Execution Vulnerability
CVE-2024-26212 High 2024-04-09 Not applicable Forecast only DHCP Server Service Denial of Service Vulnerability
CVE-2024-20697 High 2024-01-09 Not applicable Forecast only Windows libarchive Remote Code Execution Vulnerability
CVE-2023-35628 High 2023-12-12 Not applicable Forecast only Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-36041 High 2023-11-14 Not applicable Forecast only Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36039 High 2023-11-14 Not applicable Forecast only Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-36035 High 2023-11-14 Not applicable Forecast only Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-38171 High 2023-10-10 Not applicable Forecast only Microsoft QUIC Denial of Service Vulnerability
CVE-2023-36606 High 2023-10-10 Not applicable Forecast only Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36777 Medium 2023-09-12 Not applicable Forecast only Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2023-36744 High 2023-09-12 Not applicable Forecast only Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-32029 High 2023-06-14 Not applicable Forecast only Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-29325 High 2023-05-09 Not applicable Forecast only Windows OLE Remote Code Execution Vulnerability
CVE-2023-24950 Medium 2023-05-09 Not applicable Forecast only Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-24941 Critical 2023-05-09 Not applicable Forecast only Windows Network File System Remote Code Execution Vulnerability
CVE-2023-28302 High 2023-04-11 Not applicable Forecast only Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-21769 High 2023-04-11 Not applicable Forecast only Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-21758 High 2023-01-10 Not applicable Forecast only Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21547 High 2023-01-10 Not applicable Forecast only Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVE-2022-44690 High 2022-12-13 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41076 High 2022-12-13 Not applicable Forecast only PowerShell Remote Code Execution Vulnerability
CVE-2022-38053 High 2022-10-11 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38044 High 2022-10-11 Not applicable Forecast only Windows CD-ROM File System Driver Remote Code Execution Vulnerability
CVE-2022-37961 High 2022-09-13 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-37958 High 2022-09-13 Not applicable Forecast only SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2022-35823 High 2022-09-13 Not applicable Forecast only Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-30216 High 2022-07-12 Not applicable Forecast only Windows Server Service Tampering Vulnerability
CVE-2022-23270 High 2022-05-10 Not applicable Forecast only Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-21972 High 2022-05-10 Not applicable Forecast only Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2021-36952 High 2021-09-15 Not applicable Forecast only Visual Studio Remote Code Execution Vulnerability
CVE-2021-34478 High 2021-08-12 Not applicable Forecast only Microsoft Office Remote Code Execution Vulnerability
CVE-2021-26424 Critical 2021-08-12 Not applicable Forecast only Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-34501 High 2021-07-14 Not applicable Forecast only Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31213 High 2021-05-11 Not applicable Forecast only Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability
CVE-2021-28474 High 2021-05-11 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-27068 High 2021-05-11 Not applicable Forecast only Visual Studio Remote Code Execution Vulnerability
CVE-2021-28472 High 2021-04-13 Not applicable Forecast only Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
CVE-2021-28325 Medium 2021-04-13 Not applicable Forecast only Windows SMB Information Disclosure Vulnerability
CVE-2021-27084 High 2021-03-11 Not applicable Forecast only Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVE-2021-27083 High 2021-03-11 Not applicable Forecast only Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
CVE-2020-17143 High 2020-12-10 Not applicable Forecast only Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2020-1421 High 2020-07-14 Not applicable Forecast only A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.
CVE-2020-1300 High 2020-06-09 Not applicable Forecast only A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious cabinet file disguised as a printer driver.The update addresses the vulnerability by correcting how Windows handles cabinet files., aka 'Windows Remote Code Execution Vulnerability'.
CVE-2020-1181 High 2020-06-09 Not applicable Forecast only A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
CVE-2020-0655 High 2020-02-11 Not applicable Forecast only A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVE-2019-1439 Medium 2019-11-12 Not applicable Forecast only An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
CVE-2019-1234 High 2019-11-12 Not applicable Forecast only A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.
CVE-2019-1358 High 2019-10-10 Not applicable Forecast only A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.
CVE-2019-1166 Medium 2019-10-10 Not applicable Forecast only A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.
CVE-2019-1252 Medium 2019-09-11 Not applicable Forecast only An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.
CVE-2019-1181 Critical 2019-08-14 Not applicable Forecast only A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
CVE-2019-0726 Critical 2019-04-09 Not applicable Forecast only A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.
CVE-2019-0698 Critical 2019-04-09 Not applicable Forecast only A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.
CVE-2019-0626 Critical 2019-03-05 Not applicable Forecast only A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
CVE-2019-0618 High 2019-03-05 Not applicable Forecast only A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.
CVE-2019-0547 Critical 2019-01-08 Not applicable Forecast only A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers.
CVE-2018-8476 Critical 2018-11-14 Not applicable Forecast only A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows Server 2008 R2, Windows 10 Servers.
CVE-2018-8397 High 2018-08-15 Not applicable Forecast only A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CVE-2018-8239 Medium 2018-06-14 Not applicable Forecast only An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2017-11771 Critical 2017-10-13 Not applicable Forecast only The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".
CVE-2017-8620 High 2017-08-08 Not applicable Forecast only Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".
CVE-2017-0004 High 2017-01-10 Not applicable Forecast only The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability."
CVE-2016-7212 High 2016-11-10 Not applicable Forecast only Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka "Windows Remote Code Execution Vulnerability."
CVE-2016-3251 Low 2016-07-13 Not applicable Forecast only The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerability."
CVE-2016-3236 Critical 2016-06-16 Not applicable Forecast only The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redirect network traffic via unspecified vectors, aka "Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability."
CVE-2016-3213 High 2016-06-16 Not applicable Forecast only The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanism, which allows remote attackers to gain privileges via NetBIOS name responses, aka "WPAD Elevation of Privilege Vulnerability."
CVE-2016-0161 Medium 2016-04-12 Not applicable Forecast only Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0158.
CVE-2016-0117 High 2016-03-09 Not applicable Forecast only The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerability."
CVE-2016-0092 High 2016-03-09 Not applicable Forecast only OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2016-0091.
CVE-2015-6172 High 2015-12-09 Not applicable Forecast only Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted email message processed by Outlook, aka "Microsoft Office RCE Vulnerability."
CVE-2015-6096 Medium 2015-11-11 Not applicable Forecast only The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability."
CVE-2015-6058 Medium 2015-10-14 Not applicable Forecast only Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass."
CVE-2015-0015 High 2015-01-13 Not applicable Forecast only Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server (NPS), aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."
CVE-2015-0014 High 2015-01-13 Not applicable Forecast only Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
CVE-2014-1823 Medium 2014-06-11 Not applicable Forecast only Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability."
CVE-2013-3861 High 2013-10-09 Not applicable Forecast only Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."
CVE-2013-3180 Medium 2013-09-11 Not applicable Forecast only Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability."
CVE-2013-0081 Medium 2013-09-11 Not applicable Forecast only Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."
CVE-2013-3183 High 2013-08-14 Not applicable Forecast only The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of service (system hang) via crafted packets, aka "ICMPv6 Vulnerability."
CVE-2013-3182 High 2013-08-14 Not applicable Forecast only The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service (memory corruption and system hang) via crafted packets, aka "Windows NAT Denial of Service Vulnerability."
CVE-2013-3138 High 2013-06-12 Not applicable Forecast only Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
CVE-2013-1305 High 2013-05-15 Not applicable Forecast only HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
CVE-2013-0075 High 2013-02-13 Not applicable Forecast only The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
CVE-2012-0182 High 2012-10-09 Not applicable Forecast only Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
CVE-2012-1851 High 2012-08-15 Not applicable Forecast only Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
CVE-2012-1459 Medium 2012-03-21 Not applicable Forecast only The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
CVE-2012-1457 Medium 2012-03-21 Not applicable Forecast only The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
CVE-2012-1453 Medium 2012-03-21 Not applicable Forecast only The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.
CVE-2012-1443 Medium 2012-03-21 Not applicable Forecast only The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.
CVE-2012-1420 Medium 2012-03-21 Not applicable Forecast only The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
CVE-2012-0155 High 2012-02-14 Not applicable Forecast only Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."
CVE-2011-1966 High 2011-08-10 Not applicable Forecast only The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
CVE-2011-0657 Critical 2011-04-13 Not applicable Forecast only DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
CVE-2010-3229 High 2010-10-13 Not applicable Forecast only The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
‹ prev page 1 of 2 next ›