Lucene search
+L

3049 matches found

CNNVD
CNNVD
added 2023/09/12 12:00 a.m.8 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8CVSS8.4AI score0.81138EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.11 views

PT-2023-4986 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in access control, allowing a remote attacker to execute arbitrary code in the context of the server account by making a network call. This...

8CVSS9.6AI score0.81713EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.8 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8CVSS8.4AI score0.81713EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.10 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server, which can be exploit...

5.7CVSS6AI score0.81228EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.10 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8CVSS8.4AI score0.74671EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.3 views

PT-2023-5088 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in access control. It allows a remote attacker to execute arbitrary code in the context of the server account by making a network call. This...

8CVSS9.8AI score0.74671EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.3 views

PT-2023-5057 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The vulnerability in Microsoft Exchange Server is related to the deserialization mechanism, allowing remote attackers to execute arbitrary code. This issue can affect the...

8CVSS9.9AI score0.81138EPSS
SaveExploits1References37
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.4 views

PT-2023-36419 · Undefined · Undefined

Уязвимость метода DownloadDataFromUri почтового сервера Microsoft Exchange Server связана с отсутствием защиты служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

7.5CVSS7.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.7 views

PT-2023-36418 · Undefined · Undefined

Уязвимость класса ChainedSerializationBinder почтового сервера Microsoft Exchange Server связана с десериализацией ненадежных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с привилегиями SYSTEM...

7.1CVSS7.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.3 views

PT-2023-36421 · Undefined · Undefined

Уязвимость метода CreateAttachmentFromUri почтового сервера Microsoft Exchange Server связана с недостаточной проверкой поступающих запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

7.5CVSS7.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/25 12:00 a.m.7 views

PT-2023-6970 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient protection of service data during NTLM authentication, specifically with the IsUNCPath method. This can allow a remote attacker to...

8CVSS9.1AI score0.86588EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.5 views

PT-2023-6951 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a deserialization flaw in the Microsoft Exchange Server, specifically with the SerializationTypeConverter class, which can be exploited due to...

8CVSS9.1AI score0.72992EPSS
SaveExploits0References9
Malwarebytes
Malwarebytes
added 2023/08/18 11:45 a.m.66 views

Exchange Server security updates updated

Microsoft has re-released the August 2023 Security Updates SUs for Exchange Server. The original release of the SUs, from August 8 2023, had a localization issue with Exchange Server running on a non-English Operating Systems OSes that caused Setup to stop unexpectedly, leaving Exchange services ...

7.5CVSS6.8AI score0.01983EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/08/16 12:00 a.m.6 views

PT-2023-6952 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a deserialization mechanism weakness in Microsoft Exchange Server, specifically with the SerializationTypeConverter class, which can lead to...

8CVSS9AI score0.392EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/08/14 12:00 a.m.11 views

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.4AI score0.06791EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/08/14 12:00 a.m.12 views

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0247EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/08/14 12:00 a.m.12 views

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.4AI score0.02678EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/08/14 12:00 a.m.13 views

The vulnerability of Microsoft Exchange Server, related to errors in information presentation on the user interface, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

9CVSS7.5AI score0.10796EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/08/12 12:00 a.m.74 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-64865)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8.8CVSS8.1AI score0.02678EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/08/12 12:00 a.m.82 views

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-64869)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...

9.8CVSS7.1AI score0.01983EPSS
SaveExploits0References1
Rows per page
Query Builder