3062 matches found
WordPress plugin Dynamics 365 Integration 日志信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A log information disclosur...
Microsoft Dynamics 365 Customer Insights 跨站脚本漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. For information about the cross-site scripting vulnerability in Microsoft Dynamic...
PT-2024-3645 · Microsoft · Dynamics 365 Customer Insights
Name of the Vulnerable Software and Affected Versions: Dynamics 365 Customer Insights affected versions not specified Description: The issue is related to the failure to properly secure the web page structure in Microsoft Dynamics 365 Customer Insights, allowing a remote attacker to conduct...
CVE-2024-34550
CVE-2024-34550 is a documented vulnerability in the Dynamics 365 Integration plugin (AlexaCRM) for WordPress, affecting versions up to 1.3.17. The issue is described as Insertion of Sensitive Information into Log File, enabling unauthenticated exposure of potentially sensitive data via log files....
CVE-2024-34550 WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Log File vulnerability in AlexaCRM Dynamics 365 Integration.This issue affects Dynamics 365 Integration: from n/a through 1.3.17...
CVE-2024-34550 WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Log File vulnerability in AlexaCRM Dynamics 365 Integration.This issue affects Dynamics 365 Integration: from n/a through 1.3.17...
PT-2024-25965 · Unknown · Alexacrm Dynamics 365 Integration
Name of the Vulnerable Software and Affected Versions: AlexaCRM Dynamics 365 Integration versions 1.3.17 and earlier Description: The issue concerns the insertion of sensitive information into log files, which could potentially expose confidential data. Recommendations: For AlexaCRM Dynamics 365...
WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Dynamics 365 Integration versions = 1.3.17...
WordPress Dynamics 365 Integration Plugin <= 1.3.17 is vulnerable to Sensitive Data Exposure
Software Dynamics 365 Integration Type Plugin Vulnerable versions = 1.3.17 Fixed in 1.3.18 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-34550 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2397ac5f5483 Credi...
Exchange Backup Fails With: "Failed to get folder properties. Not allowed to access Non IPM folder"
Veeam Data Cloud for Microsoft 365 Customers Customers utilizing Veeam Data Cloud for Microsoft 365 , please be advised that no actions are required to address this issue. All the necessary actions were implemented in the Veeam Data Cloud backend on 2024-04-04. Challenge A backup job in Veeam...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
Cross Tenant Microsoft 365 Migration
By Uzair Amir With the massive adoption of Microsoft 365, encountering complex environments involving multiple tenants is becoming increasingly common. This is a post from HackRead.com Read the original post: Cross Tenant Microsoft 365 Migration...
How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl
In today's digital-first business environment dominated by SaaS applications, organizations increasingly depend on third-party vendors for essential cloud services and software solutions. As more vendors and services are added to the mix, the complexity and potential vulnerabilities within the Sa...
Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks
Threat actors are leveraging digital document publishing DDP sites hosted on platforms like FlipSnack, Issuu, Marq, Publuu, RelayTo, and Simplebooklet for carrying out phishing, credential harvesting, and session token theft, once again underscoring how threat actors are repurposing legitimate...
Midnight Blizzard Attack Detection in Trellix Helix
Midnight Blizzard Attack Detection in Trellix Helix By Ian Shefferman · March 18, 2024 On January 25, 2024, Microsoft reported a breach of their systems by the Russian APT group Midnight Blizzard, also known as APT29 and Cozy Bear. The attackers performed a password spray, compromised a Microsoft...
Microsoft Office 365 (2016 Click-to-Run) Elevation of Privilege Vulnerability (Mar 2024)
This host is missing a critical security update according to Microsoft Office Click-to-Run update March 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
CVE-2024-21419
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2024-21419
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
