CVE-2013-0007

CVE-2013-0007 impacts Microsoft XML Core Services (MSXML) versions 4.0–6.0. A parsing fault in MSXML can allow remote code execution when a user visits a crafted web page (MSXML XSLT vulnerability). Affected components include MSXML DLLs; root cause is improper XML content parsing. Mitigation is ...

CVE-2013-0006

CVE-2013-0006 is associated with OSIsoft PI Interface for OPC XML-DA (ICS advisory ICSA-20-315-01) and Microsoft MSXML/MS13-002 context. Connected documents identify the affected product as PI Interface for OPC XML-DA versions prior to 1.7.3.x, where the vulnerability stems from numeric errors/st...

CVE-2011-1892

CVE-2011-1892 targets SharePoint-related products (SharePoint Server/Workspace/ Groove components, Office Web Apps, Windows SharePoint Services, etc.). The flaw is an XXE-style vulnerability where Web Parts containing XML classes referencing external entities allow remote authenticated users to r...

CVE-2010-3324

CVE-2010-3324 describes an IE8/SharePoint CSS @import-based XSS bypass. The connected MSKB MS10-035 documents a broader cumulative security update for Internet Explorer to address IE vulnerabilities (including remote code execution via crafted pages) and provides update guidance. However, the pro...

CVE-2012-2520

Multiple Microsoft products are affected by an HTML Sanitization Vulnerability (Cross-site scripting) caused by the improper filtering of certain inputs within the HTML filtering component. This allows remote attackers to inject arbitrary web script or HTML, which may execute with the current use...

CVE-2013-1289

A cross-site scripting (XSS) vulnerability exists in several Microsoft products, including SharePoint Server 2010 SP1 , Groove Server 2010 SP1 , SharePoint Foundation 2010 SP1 , Office Web Apps 2010 SP1 , and InfoPath . The root cause is an invalid characters sanitization flaw within the HTML San...