Known Vulnerabilities for Index Server by Microsoft
Listed below are 9 of the newest known vulnerabilities associated with "Index Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110690 json | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack e... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-108542 json | A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the ... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-107611 json | An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malici... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107362 json | Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfi... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-106106 json | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105290 json | A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/C... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-104900 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-103008 json | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes t... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-103006 json | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested reques... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-100660 json | Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPACK en... | Not Provided | 2026-09-26 | 2026-09-28 |