Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44429 json | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the publ... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-44336 json | PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai ... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-42897 json | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an u... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-42887 json | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cross-site scripting (XSS) vulnerabil... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42190 json | RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version 1.2.3, server actions in rwsdk app... | Not Provided | 2026-05-08 | 2026-05-12 |
| CVE-2026-41472 json | CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the... | Not Provided | 2026-04-24 | 2026-04-27 |
| CVE-2026-41318 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. P... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41060 json | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeURL()` function in `objects/function... | Not Provided | 2026-04-21 | 2026-04-22 |
| CVE-2026-40487 json | Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticat... | Not Provided | 2026-04-18 | 2026-04-20 |
| CVE-2026-40484 json | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality e... | Not Provided | 2026-04-18 | 2026-04-20 |