Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
619 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 32% | 💥 PoC | Microsoft XML Core ServicesMicrosoft Windows 7Microsoft Windows 8Microsoft Windows Server 2003+11 | 9/1/2013 | 16/6/2026 | Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability." | |
| Modificada | Alta (8.8) | 28% | — | Microsoft XML Core ServicesMicrosoft Windows 7Microsoft Windows 8Microsoft Windows Server 2003+11 | 9/1/2013 | 16/6/2026 | Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability." | |
| Analizada | Alta (7.8) | 53% | ⚠ Explotación activa | Microsoft Office Compatibility PackMicrosoft Office WEB AppsMicrosoft Office Word ViewerMicrosoft Sharepoint Server+1 | 12/12/2012 | 16/6/2026 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution… | |
| Modificada | Media (4.3) | 28% | — | Microsoft Groove ServerMicrosoft InfopathMicrosoft LyncMicrosoft Office Communicator+4 | 9/10/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1… | |
| Modificada | Media (4.3) | 23% | — | Microsoft Office Sharepoint ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint ServerMicrosoft Sharepoint Services | 10/7/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List… | |
| Modificada | Media (6.8) | 11% | — | Microsoft Sharepoint Server | 10/7/2012 | 16/6/2026 | Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability." | |
| Modificada | Media (4.3) | 15% | — | Microsoft Office WEB AppsMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 10/7/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username… | |
| Modificada | Media (5.5) | 13% | — | Microsoft Office WEB AppsMicrosoft Sharepoint Server | 10/7/2012 | 16/6/2026 | Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a… | |
| Modificada | Media (4.3) | 23% | — | Microsoft Office WEB AppsMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 10/7/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx… | |
| Modificada | Media (4.3) | 17% | — | Microsoft Sharepoint ServerMicrosoft Sharepoint Foundation | 14/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability." | |
| Modificada | Media (4.3) | 17% | — | Microsoft Sharepoint ServerMicrosoft Sharepoint Foundation | 14/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability." | |
| Modificada | Alta (9.3) | 20% | — | Microsoft ExcelMicrosoft Excel ViewerMicrosoft OfficeMicrosoft Office Compatibility Pack+1 | 15/9/2011 | 16/6/2026 | Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute… | |
| Modificada | Alta (9.3) | 21% | — | Microsoft ExcelMicrosoft Excel ViewerMicrosoft Excel WEB APPMicrosoft Office+3 | 15/9/2011 | 16/6/2026 | Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on… | |
| Modificada | Media (4.3) | 17% | — | Microsoft Sharepoint FoundationMicrosoft Sharepoint ServerMicrosoft Sharepoint Services | 15/9/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability." | |
| Modificada | Media (4) | 38% | 💥 Exploit | Microsoft Forms ServerMicrosoft GrooveMicrosoft Groove Data Bridge ServerMicrosoft Groove Management Server+6 | 15/9/2011 | 16/6/2026 | Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint… | |
| Modificada | Media (4.3) | 20% | — | Microsoft Sharepoint FoundationMicrosoft Sharepoint Server | 15/9/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability." | |
| Modificada | Media (4.3) | 17% | — | Microsoft Sharepoint FoundationMicrosoft Sharepoint Server | 15/9/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability." | |
| Modificada | Alta (7.5) | 94% | 💥 Exploit | Microsoft Sharepoint Server | 16/12/2010 | 16/6/2026 | Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code… | |
| Modificada | Media (4.3) | 16% | — | Microsoft Sharepoint ServerMicrosoft Sharepoint ServicesMicrosoft Internet Explorer | 13/10/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML… | |
| Modificada | Media (4.3) | 25% | 💥 Exploit | Microsoft Groove ServerMicrosoft Internet ExplorerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server+2 | 17/9/2010 | 16/6/2026 | The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection… | |
| Modificada | Media (4.3) | 22% | — | Microsoft Office InfopathMicrosoft Sharepoint ServerMicrosoft Sharepoint ServicesMicrosoft Internet Explorer | 8/6/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors… | |
| Modificada | Media (4.3) | 29% | 💥 Exploit | Microsoft Sharepoint ServerMicrosoft Sharepoint Services | 29/4/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter. | |
| Modificada | Alta (9.3) | 21% | — | Microsoft ExcelMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Excel Viewer+2 | 10/3/2010 | 16/6/2026 | Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability." | |
| Modificada | Alta (9.3) | 26% | — | Microsoft ExcelMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Excel Viewer+2 | 10/3/2010 | 16/6/2026 | Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers during decompression… | |
| Modificada | Alta (9.3) | 21% | — | Microsoft ExcelMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Office Excel Viewer+2 | 10/3/2010 | 16/6/2026 | Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory… |