CVE-2023-36007

CVE-2023-36007 concerns Microsoft Dynamics 365 Send Customer Voice, a spoofing vulnerability in the on-premises Send Customer Voice survey UI. The issue enables UI spoofing that could lead users to impersonate or be misled by the interface. Affected products include Dynamics 365 on-premises (v9.0...

KLA61976 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...

CVE-2022-36007

creationtimestamp| type| source ---|---|--- 2022-08-15 14:37:55+00:00| seen| https://t.me/cibsecurity/48139 2025-08-22 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4vmdvk26...

CVE-2022-36007 Partial Path Traversal in com.github.jlangch:venice

Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions load-file and load-resource. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the lo...

CVE-2022-36007 Partial Path Traversal in com.github.jlangch:venice

Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions load-file and load-resource. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the lo...

CVE-2022-36007

Venice (com.github.jlangch:venice) contains a Partial Path Traversal flaw in the load-file and load-resource functions. When given absolute paths whose name prefix matches a configured load path (e.g., "/Users/foo/resources"), an attacker can access files outside the intended directory (e.g., "/U...

CVE-2021-36007

creationtimestamp| type| source ---|---|--- 2021-08-20 22:23:45+00:00| seen| https://t.me/cibsecurity/27657...

CVE-2021-36007

Adobe Prelude (10.0 and earlier) is affected by an information-disclosure issue caused by an uninitialized variable during MP4 file parsing. An unauthenticated attacker could disclose memory contents in the context of the current user, and exploitation requires the user to open a malicious file o...

CVE-2021-36007 Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Prelude version 10.0 and earlier are affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this iss...

Adobe Prelude < 10.1 Multiple Arbitrary code execution (APSB21-58)

The version of Adobe Prelude installed on the remote Windows host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-58 advisory. - Adobe Prelude version 10.0 and earlier is affected by a memory corruption vulnerability when parsing a specially...

CVE-2020-36007

creationtimestamp| type| source ---|---|--- 2021-06-04 05:30:24+00:00| seen| https://t.me/reconshell/750...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36007

CVE-2020-36007 concerns AppCMS 2.0.101 where a cross-site scripting (XSS) vulnerability exists in /admin/template/tpl_app.php. The issue allows an attacker to obtain sensitive information of other users. Reported metrics show CVSSv2 base score 4.3 ( MEDIUM ) and CVSSv3.1 base score 6.1 ( MEDIUM )...