16747 matches found
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
...
openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group
A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...
Description of the security update for Microsoft Exchange Server 2019 CU15: July 14, 2026 (KB5103213)
None None...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Heap-based buffer overflow in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: July 14, 2026 (KB5103212)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: July 14, 2026 (KB5103215)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: July 14, 2026 (KB5103214)
None None...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-10797
creationtimestamp| type| source ---|---|--- 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlustra4c24 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlusqj43c24 2026-07-14 09:18:50+00:00| seen|...
CVE-2026-50722
A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...
Improper Authorization
github.com/zitadel/zitadel is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation during OAuth2 token exchange, where the endpoint does not verify token ownership or restrict requested scopes to those of the original token, allowing attackers to exchange...
PT-2026-58249
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Security Updates for Microsoft Exchange Server (July 2026)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the July, 2026 security bulletin. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...
PT-2026-58216
Name of the Vulnerable Software and Affected Versions Windows Internet Key Exchange IKE Protocol affected versions not specified Description A heap-based buffer overflow exists in the Windows Internet Key Exchange IKE Protocol. This issue allows an unauthorized network attacker to cause a denial ...
PT-2026-58251
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
KLA91150 Multiple vulnerabilities in Microsoft Server Software
Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange Server...
CVE-2026-15584
creationtimestamp| type| source ---|---|--- 2026-07-13 13:23:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116912883381040364 2026-07-13 13:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjt5kbc6h25 2026-07-13 16:07:28+00:00| seen|...