Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114470 json | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to m... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114133 json | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes r... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-112782 json | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous vi... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-111650 json | ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unau... | Not Provided | 2026-10-16 | 2026-10-19 |
| CVE-2026-111069 json | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Sto... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110033 json | The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it ser... | Not Provided | 2026-10-18 | 2026-10-18 |
| CVE-2026-109960 json | Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to injec... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-109652 json | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-c... | Not Provided | 2026-10-12 | 2026-10-14 |
| CVE-2026-109378 json | SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that fol... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108264 json | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.... | Not Provided | 2026-10-09 | 2026-10-13 |