|
2741
|
6.1 |
MEDIUM
Network
|
microsoft
|
exchange_server
exchange_server_subscription_edition
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
|
CWE-918
CWE-79
Server-Side Request Forgery (SSRF)
Cross-site Scripting
|
CVE-2026-45501
|
2026-06-16 04:27 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2742
|
5.0 |
MEDIUM
Network
|
microsoft
|
exchange_server
exchange_server_subscription_edition
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45502
|
2026-06-16 04:24 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2743
|
6.5 |
MEDIUM
Network
|
microsoft
|
exchange_server
exchange_server_subscription_edition
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
|
CWE-285
CWE-918
Improper Authorization
Server-Side Request Forgery (SSRF)
|
CVE-2026-45503
|
2026-06-16 04:23 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2744
|
8.8 |
HIGH
Network
|
microsoft
|
exchange_server
exchange_server_subscription_edition
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45504
|
2026-06-16 04:20 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2745
|
6.5 |
MEDIUM
Network
|
vmware
|
spring_framework
|
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
A…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-41854
|
2026-06-16 04:10 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2746
|
5.4 |
MEDIUM
Network
|
vmware
|
aria_operations
cloud_foundation
telco_cloud_platform
|
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri…
|
CWE-79
Cross-site Scripting
|
CVE-2026-41724
|
2026-06-16 03:50 |
2026-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2747
|
6.5 |
MEDIUM
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denia…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-11611
|
2026-06-16 03:41 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2748
|
4.9 |
MEDIUM
Network
|
redhat
|
389_directory_server
|
A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when…
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-11793
|
2026-06-16 03:34 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2749
|
7.2 |
HIGH
Network
|
qnap
|
qts
quts_hero
|
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to e…
|
CWE-78
OS Command
|
CVE-2026-24719
|
2026-06-16 03:33 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2750
|
7.2 |
HIGH
Network
|
qnap
|
qts
quts_hero
|
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerabili…
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-24716
|
2026-06-16 03:33 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
