Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

17 records

Priority MEDIUM 40

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.2308 Published 2012-07-10 No fix listed CWE-79
Priority MEDIUM 59

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21221 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 62

Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and S…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25692 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 59

Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an un…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21256 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 60

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a cr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23095 Published 2010-03-10 No fix listed CWE-119
Priority MEDIUM 60

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23095 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 63

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel View…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27984 Published 2009-06-10 No fix listed CWE-399
Priority MEDIUM 63

Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.29444 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 64

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malf…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.3107 Published 2009-06-10 No fix listed CWE-94
Priority CRITICAL 93KEV

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel View…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.52845 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 63

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28446 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 63

Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.4791 Published 2008-12-10 No fix listed CWE-287