Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
5 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17034
CVE ID: CVE-2013-3149 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16821 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3150 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17012 - http://www.us-cert.gov/ncas/aler
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17012 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3151 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3163. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17088 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - htt
3Aorg.mitre.oval%3Adef%3A17088 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3152 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
/www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16975
CVE ID: CVE-2013-3153 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:09.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
5 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16927
CVE ID: CVE-2013-3154 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-058 - http://blogs.technet.com/b/srd/archive/2013/07/09/assessing-
om/en-us/security-updates/securitybulletins/2013/ms13-058 - http://blogs.technet.com/b/srd/archive/2013/07/09/assessing-risk-for-the-july-2013-security-updates.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17253 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3155 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3157. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18624 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-07
n/oval%3Aorg.mitre.oval%3Adef%3A18624 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-074 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3156 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File Format Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18442 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-074 - http://www.us-cert.gov/ncas/al
442 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-074 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3157 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3155. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-074 - http://www.us-cert.gov/ncas/alerts/TA13-253A - https://oval.cisecurity.org/repository/searc
itybulletins/2013/ms13-074 - http://www.us-cert.gov/ncas/alerts/TA13-253A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18664
CVE ID: CVE-2013-3158 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18984 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3159 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073 - https://oval.cis
iner: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18686 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3160 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/de
.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18819 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3161 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17301 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/nc
%3A17301 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3162 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17205 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.go
Adef%3A17205 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3163 State: PUBLISHED Published: 2013-07-10T01:00:00.000Z Last Updated: 2025-10-22T00:05:41.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
/security-updates/securitybulletins/2013/ms13-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17363 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3164 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17376 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3165 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3166 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:09.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka "Shift JIS Character Encoding Vulnerability," a different vulnerability than CVE-2013-0015. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17306 - https://docs
eferences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17306 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3167 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
ww.us-cert.gov/ncas/alerts/TA13-190A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17293
CVE ID: CVE-2013-3168 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3169 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3170 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3171 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16867 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-052 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3172 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:09.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to cause a denial of service (system hang) via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
rogram Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17188 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
CVE ID: CVE-2013-3173 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
nalyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17148 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
CVE ID: CVE-2013-3174 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:10.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-056 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.o
urity-updates/securitybulletins/2013/ms13-056 - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16883
CVE ID: CVE-2013-3175 State: PUBLISHED Published: 2013-08-14T10:00:00 Last Updated: 2024-08-06T16:00:09.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a malformed asynchronous RPC request, aka "Remote Procedure Call Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
rity-updates/securitybulletins/2013/ms13-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18293 - http://vrt-blog.snort.org/2013/08/microsoft-update-tuesday-august-2013.html - http://www.us-cert.gov/ncas/alerts/TA13-225A
CVE ID: CVE-2013-3176 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3177 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3178 State: PUBLISHED Published: 2013-07-10T01:00:00 Last Updated: 2024-08-06T16:00:09.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka "Null Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-052 - http://www.securitytracker.com/id/1028755 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
- http://www.securitytracker.com/id/1028755 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17389 - http://www.us-cert.gov/ncas/alerts/TA13-190A
CVE ID: CVE-2013-3179 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18750 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3180 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:00:10.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19136 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3181 State: PUBLISHED Published: 2013-08-14T10:00:00 Last Updated: 2024-08-06T16:00:09.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17442 - http://www.us-cert.gov/ncas/alerts/TA13-225A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
- http://www.us-cert.gov/ncas/alerts/TA13-225A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-060