Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond

Microsoft is now publishing standard attestations about third-party CVEs through the Vulnerability Exploitability eXchange VEX standard including vulnerabilities in embedded open-source software in Microsoft products and services and starting with the Azure Linux Distribution formerly CBL-Mariner...

GHSA-GVFX-P3H5-QF65

creationtimestamp| type| source ---|---|--- 2025-07-10 17:35:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830141628115070...

CVE-2024-56801

creationtimestamp| type| source ---|---|--- 2024-12-30 18:18:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113743149419974697 2024-12-30 20:58:59+00:00| seen| https://t.me/cvedetector/13950...

CVE-2024-11678

creationtimestamp| type| source ---|---|--- 2024-11-26 01:38:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113546696575056565...

Серьезная дырка в Exchange 2000 (User Account)

При установке в системе создается локальная учетная запись пользователя с заранее определенным паролем. При установке на контроллер домена запись создается в домене...