5899 matches found
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: June 09, 2026 (KB5094139)
None None...
CVE-2026-49742
CVE-2026-49742 affects TYPO3 CMS where Backend users with file download permissions can access files from the FAL fallback storage via the Media Module. The fallback storage resolves paths relative to the server document root, potentially exposing sensitive files (e.g., log files). Affected versi...
Microsoft Exchange Server 跨站脚本漏洞
Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are code vulnerabilities in Microsoft Exchange Server. Attackers can exploit these...
Microsoft Exchange Server 代码注入漏洞
Microsoft Exchange Server is a set of email service programs provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There is a code injection vulnerability in Microsoft Exchange Server. Attackers can explo...
CVE-2026-4549
creationtimestamp| type| source ---|---|--- 2026-06-05 05:59:14+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mnjhi4skj32s...
CVE-2026-41567
Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via PUT /containers/id/archive or piped through docker cp -, the daemon resolves decompression binaries such as xz or unpigz fr...
CVE-2026-4104
creationtimestamp| type| source ---|---|--- 2026-06-04 14:11:52+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnhsk4nu3u25...
PT-2026-46400
Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Controller affected versions not specified Cisco Catalyst SD-WAN Manager affected versions not specified Cisco Catalyst SD-WAN Validator affected versions not specified Description A flaw in the Command Line Interface CLI...
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in the Framework component that has come under active exploitation. Tracked as CVE-2025-48595 CVSS score: 8.4, the security flaw h...
CVE-2026-47265
AIOHTTP prior to 3.14.0 is vulnerable: cookies provided via the cookies parameter on per-request calls are sent after following a cross-origin redirect, which may leak sensitive data if an attacker can control the redirect. Version 3.14.0 patches the issue. As a workaround, using a Cookie header ...
CVE-2026-42360
creationtimestamp| type| source ---|---|--- 2026-05-31 13:14:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5nholycq2o...
CVE-2026-25680 affecting package packer for versions less than 1.9.5-14
CVE-2026-25680 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-46598 affecting package packer for versions less than 1.9.5-14
CVE-2026-46598 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-42506 affecting package packer for versions less than 1.9.5-14
CVE-2026-42506 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-42502 affecting package packer for versions less than 1.9.5-14
CVE-2026-42502 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39827 affecting package packer for versions less than 1.9.5-14
CVE-2026-39827 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-46597 affecting package packer for versions less than 1.9.5-14
CVE-2026-46597 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...