18987 matches found
EUVD-2026-73938
Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-73936
Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-63523
CVE-2026-63523 is a stored cross-site scripting (XSS) vulnerability in Skype for Business Server , affecting the Subscription Edition , 2019 , and 2015 releases. The flaw stems from improper neutralization of input during web page generation, allowing an unauthenticated attacker to perform spoofi...
CVE-2026-69690
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69615
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69417
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69356
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-82059
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
CVE-2026-69615
CVE-2026-69615 is an improper neutralization of input during web page generation (cross-site scripting) vulnerability in Microsoft Office SharePoint . An authorized attacker with high privileges and required user interaction can perform spoofing over a network . NVD rates it 4.8 (MEDIUM) ; Micros...
EUVD-2026-73712
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73696
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69402
CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...
CVE-2026-69690
Microsoft Office SharePoint is affected by an improper neutralization of input during web page generation (cross-site scripting ), allowing an authorized attacker to perform spoofing over a network. The vulnerability requires low privileges and user interaction , with impacts limited to low confi...
EUVD-2026-73125
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-69356
CVE-2026-69356 is a CRITICAL (CVSS 9.3) vulnerability in Microsoft Exchange Server involving improper neutralization of input during web page generation, commonly referred to as cross-site scripting (XSS) . An unauthorized network attacker can leverage this flaw to perform spoofing , with high im...
EUVD-2026-72946
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
CVE-2026-82055 Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service
A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...
EUVD-2026-72942
A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...