2434 matches found
CVE-2025-54420
CVE-2025-54420 is listed as a duplicate of CVE-2025-8129. The Connected IBM bulletins summarize CVE-2025-8129 as a back-redirect/open-redirect issue in KoaJS (lib/response.js Referrer handling) affecting Koa up to 3.0.0, with a CVSS base score of 6.1 and public exploit context. No additional, ind...
CVE-2025-47899
CVE-2025-47899 is rejected/not used and does not represent an active vulnerability entry.
Security Update For Exchange Server 2019 CU4 (KB4540123)
A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server...
Security Update for Outlook Express for Windows Server 2003 64-bit Itanium Edition (KB897715)
A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Outlook Express and gain control over it. User interaction is required to exploit this vulnerability. You can help protect your computer by installing this update from Microsoft. After you...
Security Update For Exchange Server 2016 CU18 (KB4581424)
A Microsoft Exchange information disclosure exists in how tokens are validated when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user...
Security Update For Exchange Server 2016 CU11 (KB4471389)
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...