1655 matches found
KLA11420 Multiple vulnerabilities in Microsoft Exchange Server
Multiple elevation of privilege vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2019-0724 CVE-2019-0686 ADV190004 Related products Microsoft-Exchange-Server CVE list CVE-2019-0724 critical...
Microsoft Exchange Server CVE-2019-0724 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2010 SP3 Update Rollup 26 Microsoft Exchange Server 2013 Cumulative Update 22 Microsoft...
Microsoft Exchange Server CVE-2019-0686 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2010 SP3 Update Rollup 26 Microsoft Exchange Server 2013 Cumulative Update 22 Microsoft...
KLA11412 Elevation of Privilege Vulnerability in Microsoft Exchange Server
Unspecified vulnerability was found in Microsoft Exchange server. Malicious users can exploit this vulnerability via specially designed request to gain privileges. Original advisories ADV190007 Related products Microsoft-Exchange-Server CVE list KB list 4471391 4471392 4487052 4345836 Solution...
The vulnerability of Microsoft Exchange Server servers, related to access control errors, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system user by sending a specially crafted email message...
The vulnerability of Microsoft Exchange Server, related to access control deficiencies, allows a hacker to execute arbitrary code in the context of the system’s users.
The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system’s users, by sending a specially crafted email message...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2019-14453)
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which arises from the software's failure to...
Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2019-14452)
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server, which can be exploited by a remote attacker to...
Information disclosure
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server...
Zerodium Offers to Buy Zero-Day Exploits at Higher Prices Than Ever
Well, there's some good news for hackers and vulnerability hunters, though terrible news for tech manufacturers! Exploit vendor Zerodium is now willing to offer significantly higher payouts for full, working zero-day exploits that allow stealing of data from WhatsApp, iMessage and other online ch...
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: January 8, 2019
None None...
Microsoft Exchange Server CVE-2019-0588 Information Disclosure Vulnerability
Description Microsoft Exchange Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Exchange Server 2010 SP3 Update Rollup 25 Microsoft Exchange Serve...
KLA11395 Multiple vulnerabilities in Microsoft Exchange Server
Multiple serious vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Microsoft Exchange can be...
The vulnerability of Microsoft Exchange Server’s mail server, related to insecure management of privileges, allows a hacker to modify user profile data.
The vulnerability of Microsoft Exchange Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify user profiles through a specially crafted request...
CVE-2018-8604
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...
Spoofing
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...
CVE-2018-8604
CVE-2018-8604 is a Microsoft Exchange Server vulnerability rooted in improper handling of profile data, causing a tampering vulnerability. An attacker who is authenticated on an affected Exchange Server can send a specially crafted request to modify a targeted user’s profile data. The impact is l...
Description of the security update for the tampering vulnerability in Microsoft Exchange Server 2016: December 11, 2018
None None...
Microsoft Exchange Server CVE-2018-8604 Tampering Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Exchange Server 2016 Cumulative Update 10 Microsoft Exchange Server 2016...