3707 matches found
Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...
CVE-2026-74234
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...
CVE-2026-74234 Legora < 2026-08-14 XSS via Mermaid gray-matter JavaScript Engine
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...
CVE-2026-74234 Legora < 2026-08-14 XSS via Mermaid gray-matter JavaScript Engine
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...
CVE-2026-74234
Legora before 2026-08-14 renders Mermaid diagrams by running a gray-matter front-matter parser that calls eval() before SVG sanitization, letting attackers inject arbitrary JavaScript via crafted diagram content. Impact is elevated on Word and Outlook add-in surfaces where bearer session tokens a...
Security Updates for Microsoft Outlook Products C2R (August 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in Microsof...
CVE-2026-62708
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:49+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:46+00:00| seen|...
CVE-2026-62740
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:45+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:42+00:00| seen|...
CVE-2026-62750
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:43+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:45:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:41+00:00| seen|...
CVE-2026-61348
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:29+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:45:57+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:26+00:00| seen|...
CVE-2026-57105
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...
CVE-2026-70329
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-62882
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-56723
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability
...
CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability
...
CVE-2026-62882
The CVE-2026-62882 entry concerns Microsoft Office Outlook, with a vulnerability described as insufficiently protected credentials that allows an unauthenticated attacker to perform spoofing over a network. According to the CVSSv3.1 metrics, the impact is low confidentiality, no integrity or avai...
CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability
...