Latest CVE Feed
-
8.8
HIGHCVE-2015-7678
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.... Read more
Affected Products : moveit_mobile- EPSS Score: %0.01
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-7677
The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEit... Read more
Affected Products : moveit_dmz- EPSS Score: %0.02
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
6.5
MEDIUMCVE-2015-7675
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (... Read more
- EPSS Score: %0.02
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0084
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."... Read more
Affected Products : edge- EPSS Score: %17.94
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-0080
Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."... Read more
Affected Products : edge- EPSS Score: %15.16
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-0077
Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."... Read more
- EPSS Score: %9.36
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0072
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more
Affected Products : internet_explorer- EPSS Score: %14.03
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0071
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."... Read more
Affected Products : internet_explorer- EPSS Score: %20.46
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0067
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more
Affected Products : internet_explorer- EPSS Score: %20.46
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0064
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."... Read more
Affected Products : internet_explorer- EPSS Score: %20.46
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0063
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more
Affected Products : internet_explorer- EPSS Score: %40.62
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0062
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."... Read more
- EPSS Score: %17.08
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0061
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vuln... Read more
- EPSS Score: %17.08
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0060
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vuln... Read more
- EPSS Score: %29.92
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-0059
The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1) e-mail message or (2) Office document, aka "Internet Explorer Information Discl... Read more
Affected Products : internet_explorer- EPSS Score: %17.58
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0058
Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted PDF document that triggers API calls, aka "Microsoft PDF Library Buffer Overflow V... Read more
- EPSS Score: %26.34
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0056
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption ... Read more
- EPSS Score: %24.71
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0055
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."... Read more
Affected Products : office- EPSS Score: %30.33
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0054
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server... Read more
- EPSS Score: %28.45
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0053
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server... Read more
Affected Products : office word word_viewer sharepoint_server office_compatibility_pack office_web_apps_server- EPSS Score: %22.76
- Published: Feb. 10, 2016
- Modified: Apr. 12, 2025