18058 matches found
CVE-2023-36035
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2023-36035
Microsoft Exchange Server Spoofing Vulnerability...
Spoofing
Microsoft Exchange Server Spoofing Vulnerability...
Spoofing
Microsoft Exchange Server Spoofing Vulnerability...
Spoofing
Microsoft Exchange Server Spoofing Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36035
CVE-2023-36035 is a Microsoft Exchange Server spoofing vulnerability. Public sources in the provided documents identify it as part of the Exchange Server spoofing family addressed by the November 2023 security update KB5032146. The NVD entry lists a CVSS v3.1 base score of 8.0 (HIGH), with attack...
CVE-2023-36035 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36035 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36039 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36050 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36050
CVE-2023-36050 is a Microsoft Exchange Server Spoofing Vulnerability. The connected security update KB5032146 lists CVE-2023-36050 among fixed issues for Exchange Server products, specifically: Exchange Server 2019 CU13 SU4, Exchange Server 2019 CU12 SU11, and Exchange Server 2016 CU23 SU11. The ...
CVE-2023-36039
CVE-2023-36039 is a Microsoft Exchange Server spoofing vulnerability. Public sources in the provided docs identify it as a high-severity flaw (CVSS v3.1 base score 8.0) that enables spoofing with adjacent-network access, no user interaction, and high impact on confidentiality, integrity, and avai...
CVE-2023-36039 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36050 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2023-36439 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-36439
CVE-2023-36439 pertains to Microsoft Exchange Server and represents a remote code execution vulnerability on Exchange Server. The vulnerability could allow an attacker who is authenticated to the target’s local network (e.g., via spear phishing credentials) to install malicious software on the se...
libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart
A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...
libreswan: Invalid IKEv2 REKEY proposal causes restart
An assertion failure flaw was found in the Libreswan package that occurs when processing IKEv2 REKEY requests. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notification INVALIDSPI is sent back. The notify payload's protocol ID is copied from...
