Page 9 of 234 results (0.010 seconds)

CVSS: 6.5EPSS: 18%CPEs: 4EXPL: 2

24 Feb 2021 — Microsoft Exchange Server Spoofing Vulnerability Una Vulnerabilidad de Suplantación de Identidad de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-1730 Microsoft Exchange Server has a flaw that exists within the HasValidCanary function inside of the Canary15 class. The issue results in an insecure generation of cross site request forgery tokens that can be used to install an office-addins. An attacker can leverage this vulnerability to escalate privileges to an administrative account. • https://packetstorm.news/files/id/161528 •

CVSS: 8.4EPSS: 91%CPEs: 1EXPL: 2

09 Dec 2020 — Microsoft Exchange Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Microsoft Exchange Este ID de CVE es diferente de CVE-2020-17117, CVE-2020-17132, CVE-2020-17141, CVE-2020-17142 Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. • https://github.com/zcgonvh/CVE-2020-17144 • CWE-502: Deserialization of Untrusted Data •

CVSS: 9.1EPSS: 3%CPEs: 5EXPL: 0

09 Dec 2020 — Microsoft Exchange Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Microsoft Exchange Este ID de CVE es diferente de CVE-2020-17117, CVE-2020-17132, CVE-2020-17141, CVE-2020-17144. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17142 •

CVSS: 8.8EPSS: 82%CPEs: 5EXPL: 0

09 Dec 2020 — Microsoft Exchange Server Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Exchange • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17143 •

CVSS: 8.4EPSS: 38%CPEs: 4EXPL: 0

09 Dec 2020 — Microsoft Exchange Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Microsoft Exchange Este ID de CVE es diferente de CVE-2020-17117, CVE-2020-17132, CVE-2020-17142, CVE-2020-17144. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17141 •

CVSS: 9.1EPSS: 84%CPEs: 5EXPL: 0

09 Dec 2020 — Microsoft Exchange Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Microsoft Exchange Este ID de CVE es diferente de CVE-2020-17117, CVE-2020-17141, CVE-2020-17142, CVE-2020-17144 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17132 •

CVSS: 9.0EPSS: 10%CPEs: 5EXPL: 0

09 Dec 2020 — Microsoft Exchange Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Microsoft Exchange. Este ID de CVE es diferente de CVE-2020-17132, CVE-2020-17141, CVE-2020-17142, CVE-2020-17144 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17117 •

CVSS: 9.0EPSS: 2%CPEs: 5EXPL: 0

11 Nov 2020 — Microsoft Exchange Server Remote Code Execution Vulnerability Vulnerabilidad de Ejecución Remota de Código de Microsoft Exchange Server Este ID de CVE es diferente CVE-2020-17083. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17084 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 6.2EPSS: 2%CPEs: 5EXPL: 0

11 Nov 2020 — Microsoft Exchange Server Denial of Service Vulnerability Vulnerabilidad de Denegación de Servicio de Microsoft Exchange Server • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17085 •

CVSS: 5.5EPSS: 43%CPEs: 5EXPL: 0

11 Nov 2020 — Microsoft Exchange Server Remote Code Execution Vulnerability Vulnerabilidad de Ejecución Remota de Código de Microsoft Exchange Server Este ID de CVE es diferente CVE-2020-17084. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17083 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •