Lucene search
+L

2981 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.43 views

Microsoft Exchange PEFile Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the PEFile class. The issue results from the exposure of a dangerous function. An...

4.3CVSS0.9AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.39 views

Microsoft Exchange GsmReader Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the GsmReader class. The issue results from the exposure of a dangerous function...

4.3CVSS1AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.42 views

Microsoft Exchange FileHandler Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileHandler class. The issue results from the exposure of a dangerous functio...

4.3CVSS0.8AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.62 views

Microsoft Exchange DumpDataReader Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the DumpDataReader class. The issue results from the exposure of a dangerous...

4.3CVSS1.2AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.42 views

Microsoft Exchange PstStatusLog Exposed Dangerous Function Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the PstStatusLog class. The issue results from the exposure of a dangerous...

7.6CVSS1.9AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.40 views

Microsoft Exchange StreamWriterWrapper Exposed Dangerous Function Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the StreamWriterWrapper class. The issue results from the exposure of a...

7.6CVSS1.6AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.28 views

Microsoft Exchange FlatFileTraceListener Exposed Dangerous Function Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the FlatFileTraceListener class. The issue results from the exposure of a...

7.1CVSS1.6AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.30 views

Microsoft Exchange ScriptingAgentConfiguration Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the ScriptingAgentConfiguration class. The issue results from the exposure of a...

4.3CVSS0.3AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.46 views

Microsoft Exchange DbgEngDataReader Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the DbgEngDataReader class. The issue results from the exposure of a dangerous...

4.3CVSS0.8AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/22 12:00 a.m.42 views

Microsoft Exchange RecipientProvisioningDefinition External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the RecipientProvisioningDefinition class. Due to the improper restriction of XML...

7.1CVSS1.9AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/21 12:00 a.m.36 views

Microsoft Exchange TorusTryAccessCheck Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Exchange. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS3.9AI score0.00603EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/21 12:00 a.m.49 views

Microsoft Exchange GetTorusCmdletConfigurationEntries Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Exchange. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS4.6AI score0.00603EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.21 views

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS8AI score0.77326EPSS
SaveExploits4References3
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.24 views

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.5AI score0.00603EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.22 views

The vulnerability of Microsoft Exchange Server servers arises from the improper processing of user data, allowing attackers to carry out spamming attacks.

The vulnerability of Microsoft Exchange Server exists due to incorrect processing of user data. Exploiting this vulnerability allows a malicious actor to perform a spear-phishing attack remotely...

8CVSS7.5AI score0.0082EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/11 12:00 a.m.99 views

Security Updates for Microsoft Exchange Server (Nov 2022)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Nov, 2022 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2022-41078, CVE-2022-41079 - Microsoft Exchange...

9.8CVSS8.4AI score0.9997EPSS
SaveExploits16References7
CNVD
CNVD
added 2022/11/10 12:00 a.m.60 views

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-72231)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

8CVSS6.7AI score0.0082EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/10 12:00 a.m.49 views

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-51378)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker can...

7.8CVSS6.9AI score0.00603EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/09 10:15 p.m.5 views

CVE-2022-41123

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.00603EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/09 10:15 p.m.31 views

CVE-2022-41123

Microsoft Exchange Server Elevation of Privilege Vulnerability...

7.8CVSS0.00603EPSS
SaveExploits0References1
Rows per page
Query Builder