CVE-2023-1724

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724

CVE-2023-1724 affects Faveo Helpdesk Enterprise 6.0.1. The vulnerability is a stored XSS in the application that enables privilege escalation for an attacker possessing agent permissions. Documented impact states that an agent with privileges can escalate within the app; no public exploitation de...

Amazon Linux AMI : yasm (ALAS-2023-1724)

The version of yasm installed on the remote host is prior to 1.2.0-1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1724 advisory. An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprgetintnum in libyasm/expr.c...

CVE-2022-1724

The CVE-2022-1724 entry concerns the WordPress Simple Membership plugin (versions prior to 4.1.1). The issue is a reflected Cross-Site Scripting vulnerability in which parameters are not properly sanitized/escaped before being echoed in AJAX actions, enabling injection of malicious scripts when a...

RHEL 8 : thunderbird (RHSA-2022:1724)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1724 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.9.0. Security Fixes: Mozilla:...

Mageia: Security Advisory (MGASA-2014-0183)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44876

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...

Dalmark Systems Systeam 安全漏洞

Dalmark Systems Systeam is an Erp system from the Brazilian company Dalmark Systems. A security vulnerability exists in Dalmark Systems Systeam version 2.22.8 build 1724, which can be exploited by an attacker to brute force a valid user...

Dalmark Systems Systeam 安全漏洞

Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...

SUSE: Security Advisory (SUSE-SU-2019:1724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1724

creationtimestamp| type| source ---|---|--- 2021-02-26 02:44:27+00:00| seen| https://t.me/cibsecurity/24188...

CVE-2021-1724

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-1724 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

CVE-2021-1724

CVE-2021-1724 corresponds to a Cross-site Scripting vulnerability in Microsoft Dynamics Business Central. The connected data confirms an XSS issue caused by improper validation of user-supplied input in the web-facing Links and Notes feature, which authenticated attackers can exploit by crafting ...

Security Updates for Microsoft Dynamics 365 Business Central (Feb 2021)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by a cross site scripting XSS vulnerability due to improper validation of user-supplied input. An authenticated attacker can exploit this, by entering specially crafted URLs in the Links a...

XSS attack in Links and Notes feature in Microsoft Dynamics NAV (KB4602915)

None None...

KLA12070 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dataverse can be exploited...

Important: Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6 security and bug fix update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...