PT-2026-47973

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites...

PT-2026-48295

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A buffer overflow can occur during the execution of an aggregation pipeline using the internal $exchange stage. This happens when the stage is configured with key-range partitioning and...

PT-2026-47977

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper control of code generation allows an unauthorized remote attacker to execute arbitrary code over a network, potentially affecting the system. This is a code injecti...

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB Corporation in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which arises...

Microsoft Exchange Server 跨站脚本漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. Microsoft Exchange Server has a cross-site scripting vulnerability. Attackers exploit this...

CVE-2026-42770

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

Microsoft Exchange Server 代码注入漏洞

Microsoft Exchange Server is a set of email service programs provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There is a code injection vulnerability in Microsoft Exchange Server. Attackers can explo...

Microsoft Exchange Server 服务端请求伪造漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are code vulnerabilities in Microsoft Exchange Server. Attackers can exploit these...

PT-2026-47975

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An improper authorization issue leads to Server-side Request Forgery SSRF, a flaw where a server is tricked into making unintended requests to an internal or external...

PT-2026-47840

Name of the Vulnerable Software and Affected Versions OpenSSL FIPS modules versions 3.0, 3.4, 3.5, 3.6, and 4.0 Description When the EVP PKEY derive set peer function is called with a DHX X9.42 peer key, the software fails to properly verify subgroup membership. Specifically, the check Y^q ≡ 1 mo...

PT-2026-47976

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An elevation-of-privilege issue exists due to a server-side request forgery SSRF flaw. This occurs because of insufficient input validation of URLs in the attachment preview...

Microsoft Exchange Server 跨站脚本漏洞

Microsoft Exchange Server is a set of email service programs provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. Microsoft Exchange Server has a cross-site scripting vulnerability. Attackers utilize thi...

Microsoft Exchange Server 授权问题漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are vulnerabilities related to authorization in Microsoft Exchange Server. Attackers can...

GHSA-V4P8-MG3P-G94G

creationtimestamp| type| source ---|---|--- 2026-06-08 22:07:55+00:00| seen| https://infosec.exchange/users/secdb/statuses/116716025409567659 2026-07-06 12:56:58+00:00| seen| https://bsky.app/profile/alphahunt.io/post/3mpy5bjtqac2z 2026-07-06 12:56:58+00:00| seen|...

CVE-2026-46277

creationtimestamp| type| source ---|---|--- 2026-06-08 18:52:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715993943710466 2026-07-02 06:53:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-46290

creationtimestamp| type| source ---|---|--- 2026-06-08 18:25:19+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715887798861331 2026-07-02 06:53:39+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-11683

creationtimestamp| type| source ---|---|--- 2026-06-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260609 2026-06-09 00:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsyjchzqc2a 2026-06-09 05:28:06+00:00| seen|...

CVE-2026-11553

creationtimestamp| type| source ---|---|--- 2026-06-08 13:55:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116714826088803584 2026-06-08 20:09:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsiffskga2t...

CVE-2026-11557

creationtimestamp| type| source ---|---|--- 2026-06-08 13:28:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116714719508127342...

CVE-2026-50751

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...