Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft security response center vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
6.5
CVSSv3
CVE-2023-20168
A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local malicious user to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation when processing an authentication ...
Cisco Nx-os 9.3\\(11\\)Cisco Nx-os 10.2\\(5\\)Cisco Nx-os -
7.8
CVSSv3
CVE-2023-20050
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local malicious user to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to speci...
Cisco Nx-os -Cisco Nx-os
8.8
CVSSv3
CVE-2022-20824
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent malicious user to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This ...
Cisco Mds 9506 Firmware -Cisco Mds 9513 Firmware -Cisco Mds 9706 Firmware -Cisco Mds 9710 Firmware -Cisco Mds 9718 Firmware -Cisco Nexus 1000v Firmware -Cisco Nexus 3016 Firmware -Cisco Nexus 3016q Firmware -Cisco Nexus 3048 Firmware -Cisco Nexus 3064 Firmware -Cisco Nexus 3064-32t Firmware -Cisco Nexus 3064-t Firmware -Cisco Nexus 3064-x Firmware -Cisco Nexus 3064t Firmware -Cisco Nexus 3064x Firmware -Cisco Nexus 3100 Firmware -Cisco Nexus 3100-v Firmware -Cisco Nexus 3100-z Firmware -Cisco Nexus 3100v Firmware -Cisco Nexus 31108pc-v Firmware -Cisco Nexus 31108pv-v Firmware -Cisco Nexus 31108tc-v Firmware -
8.8
CVSSv3
CVE-2022-23277
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server 2013Microsoft Exchange Server 2016Microsoft Exchange Server 2019
4.3
CVSSv3
CVE-2022-20625
A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent malicious user to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper...
Cisco Firepower Extensible Operating SystemCisco Nx-os 8.2\\(7.34\\)Cisco Nx-os 5.2\\(1\\)sv5\\(1.3b\\)Cisco Nx-os 9.3\\(8.15\\)Cisco Nx-os 4.0\\(1a\\)aCisco Nx-os 4.1\\(3f\\)c
8.8
CVSSv3
CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server 2016Microsoft Exchange Server 2019
3.5
CVSSv3
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is ...
Ieee Ieee 802.11Linux Mac80211 -Microsoft Windows Server 2008 R2Microsoft Windows 10 1607Microsoft Windows 8.1 -Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows 7 -Microsoft Windows Rt 8.1 -Microsoft Windows Server 2012 -Microsoft Windows 10 -Microsoft Windows 10 1803Microsoft Windows Server 2019 -Microsoft Windows 10 1809Microsoft Windows 10 1909Microsoft Windows 10 2004Microsoft Windows Server 2016 2004Microsoft Windows 10 20h2Debian Debian Linux 9.0Siemens Scalance W1748-1 Firmware -Siemens Scalance W1750d Firmware -Siemens Scalance W1788-1 Firmware -
5.9
CVSSv3
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Api Gateway 11.1.2.4.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Business Intelligence 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Business Intelligence 5.5.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle MysqlOracle Graalvm 19.3.4Oracle Graalvm 20.3.0Oracle Essbase 21.2
8.6
CVSSv3
CVE-2020-3203
A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause a memory leak that could lead to a denial of ...
Cisco Ios Xe 16.1.1Cisco Ios Xe 16.1.2Cisco Ios Xe 16.1.3Cisco Ios Xe 16.2.1Cisco Ios Xe 16.2.2Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.3.4Cisco Ios Xe 16.3.5Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.3.7Cisco Ios Xe 16.3.8Cisco Ios Xe 16.3.9Cisco Ios Xe 16.4.1Cisco Ios Xe 16.4.2Cisco Ios Xe 16.4.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.5.1b
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook