Lucene search
+L

2986 matches found

CNNVD
CNNVD
added 2023/02/14 12:00 a.m.19 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker can exploi...

7.2CVSS8.1AI score0.0787EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/20 12:00 a.m.11 views

The vulnerability of the Microsoft Exchange Server mail server, related to access to a channel from a non-endpoint location, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server lies in the access to the channel from a point that is not a final destination. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...

8CVSS7.5AI score0.0155EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/20 12:00 a.m.14 views

The vulnerability of Microsoft Exchange Server servers, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Exchange Server lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

7.8CVSS7.3AI score0.01595EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/20 12:00 a.m.14 views

The vulnerability of the Microsoft Exchange Server mail server, combined with deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.00599EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/20 12:00 a.m.13 views

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.00569EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.15 views

The vulnerability of Microsoft Exchange Server servers, related to access to a channel from a non-endpoint location, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server lies in the access to the channel from a point that is not a final destination. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

8CVSS7.5AI score0.01497EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.52 views

Microsoft Exchange GetTorusCmdletConfigurationEntries Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Exchange. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.8AI score0.00569EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.30 views

Microsoft Exchange TorusUpdateInitialSessionState Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Exchange. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.8AI score0.00599EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.61 views

Microsoft Exchange PowerShell Unsafe Reflection NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the PowerShell endpoint. The process does not properly restrict a user-supplied argument...

8.8CVSS7.5AI score0.01497EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/13 12:00 a.m.24 views

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-51375)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...

7.8CVSS6.9AI score0.00599EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/13 12:00 a.m.48 views

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-51377)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

8CVSS6.4AI score0.0155EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/13 12:00 a.m.75 views

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-51373)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

8CVSS6.7AI score0.01497EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/13 12:00 a.m.28 views

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server, which can be exploit...

7.5CVSS6AI score0.01595EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2023/01/11 5:32 a.m.144 views

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit

The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws, including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities...

9.8CVSS0.6AI score0.9997EPSS
SaveExploits11
Tenable Nessus
Tenable Nessus
added 2023/01/11 12:00 a.m.84 views

Security Updates for Microsoft Exchange Server (Jan 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Jan, 2023 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2023-21745, CVE-2023-21762 - Microsoft Exchange...

8CVSS8.1AI score0.01595EPSS
SaveExploits0References8
Rapid7 Blog
Rapid7 Blog
added 2023/01/10 10:32 p.m.132 views

Patch Tuesday - January 2023

Microsoft is starting the new year with a bang! Today’s Patch Tuesday release addresses almost 100 CVEs. After a relatively mild holiday season, defenders and admins now have a wide range of exciting new vulnerabilities to consider. Two zero-day vulnerabilities emerged today, both affecting a wid...

0.8AI score0.92529EPSS
SaveExploits17
OSV
OSV
added 2023/01/10 10:15 p.m.2 views

CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.00569EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2023/01/10 10:15 p.m.4 views

CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00599EPSS
SaveExploits0References3Affected Software3
NVD
NVD
added 2023/01/10 10:15 p.m.26 views

CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS7.7AI score0.00569EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/10 10:15 p.m.2 views

CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.00599EPSS
SaveExploits0References1
Rows per page
Query Builder