Lucene search
+L

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•69 views

Siemens JT2Go GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•67 views

Siemens JT2Go GIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

7.8CVSS4.6AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•60 views

Siemens JT2Go PCT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCT...

7.8CVSS4.2AI score0.01891EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•46 views

Siemens JT2Go BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•56 views

Siemens JT2Go TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS4.2AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•68 views

(Pwn2Own) Microsoft Windows spaceport Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the spaceport.sys...

8.8CVSS5.7AI score0.00812EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•50 views

Siemens JT2Go ASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ASM...

7.8CVSS5.5AI score0.02079EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•47 views

Siemens JT2Go PAR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS5.6AI score0.02132EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•79 views

Siemens JT2Go BMP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.4AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•64 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.1AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•127 views

Siemens JT2Go JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.4AI score0.01891EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•114 views

(Pwn2Own) Microsoft Exchange Server CabUtility ExtractCab Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. User interaction is required to exploit this vulnerability. The specific flaw exists within the parsing of CAB files. When handling filenames specified within a C...

7.1CVSS3.7AI score0.13006EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•54 views

Microsoft Windows InstallService Time-Of-Check Time-Of-Use Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4AI score0.00801EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•50 views

Siemens JT2Go TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•65 views

Siemens JT2Go TIFF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIFF...

7.8CVSS4.6AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•70 views

Siemens JT2Go GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•108 views

Microsoft SharePoint CabUtility ExtractCab Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft SharePoint. User interaction is required to exploit this vulnerability. The specific flaw exists within the parsing of CAB files. When handling filenames specified within a CAB...

7.1CVSS3.6AI score0.02129EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•65 views

Microsoft Visual Studio Code maven.executable.options Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.7AI score0.05095EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•51 views

Siemens JT2Go GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

7.8CVSS4.3AI score0.01856EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•70 views

Siemens JT2Go BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.1AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•42 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•50 views

Siemens JT2Go J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS3AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•49 views

Siemens JT2Go JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.4AI score0.01753EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•56 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.1AI score0.01728EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•76 views

Siemens JT2Go PAR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS5.6AI score0.00653EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•64 views

Siemens JT2Go PAR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS5.6AI score0.02132EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•42 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•53 views

(Pwn2Own) Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

8.8CVSS5.9AI score0.01049EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•189 views

(Pwn2Own) Microsoft Exchange Server Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of...

8.8CVSS3.2AI score0.99782EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•54 views

(Pwn2Own) Microsoft Windows AppX Deployment Service Race Condition Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX Deploymen...

7CVSS6AI score0.00852EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•71 views

Schneider Electric C-Bus Toolkit Missing Authentication Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Schneider Electric C-Bus Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.5CVSS2.2AI score0.12083EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•65 views

Siemens JT2Go TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS4.2AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•41 views

Siemens JT2Go TIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•57 views

Siemens JT2Go GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•35 views

(0Day) WSO2 API Manager JMX Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WSO2 API Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JMX RMI service, which listens on TCP port 11111 by default. The service contains a...

9.8CVSS3.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•37 views

(0Day) Advantech WebAccess/NMS DashBoardAction Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the DashBoardAction endpoint of the web server. The...

5.3CVSS1.8AI score0.00948EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•77 views

Siemens JT2Go ASM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ASM...

7.8CVSS4.7AI score0.00646EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•48 views

Siemens JT2Go J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS3AI score0.01217EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•76 views

Siemens JT2Go BMP File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.6AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•71 views

Siemens JT2Go PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS5.6AI score0.01891EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•66 views

Siemens JT2Go J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS4.1AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•53 views

Siemens JT2Go TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS4.2AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•46 views

Siemens JT2Go TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•65 views

Siemens JT2Go TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS5.5AI score0.01891EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•54 views

(Pwn2Own) Microsoft Windows win32kfull Bitmap Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

8.8CVSS4.6AI score0.01049EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•67 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.1AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•49 views

Siemens JT2Go BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•68 views

Siemens JT2Go SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SGI...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•52 views

Cisco WebEx Network Recording Player ARF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

3.3CVSS3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•779 views

(Pwn2Own) Microsoft Exchange Server Autodiscover Server Side Request Forgery Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Autodiscover service. The issue results from the lack of proper validation...

10CVSS2.4AI score0.99999EPSS
SaveExploits16References1
Total number of security vulnerabilities17156