Lucene search
+L

3043 matches found

CNNVD
CNNVD
added 2024/08/13 12:00 a.m.9 views

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

8.2CVSS6.2AI score0.00998EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.12 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

7.1CVSS6.4AI score0.0078EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.12 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

7.8CVSS6.4AI score0.00897EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/08/12 12:00 a.m.12 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to insufficient protection of sensitive data, allows attackers to execute spear-phishing attacks.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a malicious actor to execute a spear-phishing attack, provided that the user is directed to a specific link and opens ...

7.8CVSS6.1AI score0.20296EPSS
SaveExploits2References3
CNVD
CNVD
added 2024/08/09 12:00 a.m.40 views

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-40538)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. Microsoft Dynamics 365 on-premises suffers from a cross-site scripting vulnerability tha...

8.2CVSS6.2AI score0.0075EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/08/09 12:00 a.m.10 views

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 allows a malicious individual to escalate their privileges.

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

9CVSS5.4AI score0.00884EPSS
SaveExploits0References5Affected Software1
The Hacker News
The Hacker News
added 2024/08/08 9:41 a.m.17 views

New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links

Cybersecurity researchers have discovered a novel phishing campaign that leverages Google Drawings and shortened links generated via WhatsApp to evade detection and trick users into clicking on bogus links designed to steal sensitive information. "The attackers chose a group of the best-known...

6.8AI score
SaveExploits0
HackRead
HackRead
added 2024/08/07 1:34 p.m.9 views

Phishing Attacks Can Bypass Microsoft 365 Email Safety Warnings

A vulnerability in Microsoft 365s anti-phishing measures allows malicious actors to deceive users into opening harmful emails by…...

7.1AI score
SaveExploits0
NVD
NVD
added 2024/08/06 10:15 p.m.32 views

CVE-2024-38166

An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link...

8.2CVSS0.0075EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/06 9:38 p.m.94 views

CVE-2024-38166

CVE-2024-38166 is a cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises and related Dynamics components) caused by improper neutralization of input during web page generation. An unauthenticated attacker can exploit this weakness to spoof the user interface or execute ...

8.2CVSS6.9AI score0.0075EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/06 9:38 p.m.41 views

CVE-2024-38166 Microsoft Dynamics 365 Cross-site Scripting Vulnerability

...

8.2CVSS0.0075EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/06 9:38 p.m.18 views

CVE-2024-38166 Microsoft Dynamics 365 Cross-site Scripting Vulnerability

...

8.2CVSS8.3AI score0.0075EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/06 12:00 a.m.6 views

PT-2024-5725 · Microsoft · Dynamics 365 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics CRM affected versions not specified Microsoft Dynamics 365 affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics CRM, allowing for imprope...

8.5CVSS6.7AI score0.0075EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2024/08/06 12:00 a.m.10 views

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. Microsoft Dynamics 365 on-premises suffers from a cross-site scripting vulnerability tha...

8.2CVSS6AI score0.0075EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/07/31 11:15 p.m.5 views

CVE-2024-38182

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...

9.8CVSS5.5AI score0.00884EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/31 11:15 p.m.35 views

CVE-2024-38182

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...

9.8CVSS0.00884EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/31 11:15 p.m.9 views

CVE-2024-38182

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...

9.8CVSS5.8AI score0.00884EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/31 11:00 p.m.40 views

CVE-2024-38182 Microsoft Dynamics 365 Elevation of Privilege Vulnerability

...

9CVSS0.00884EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/31 11:00 p.m.103 views

CVE-2024-38182

CVE-2024-38182 is a Microsoft Dynamics 365 elevation-of-privilege vulnerability described as weak authentication that allows an unauthenticated, network-based attacker to escalate privileges. Connected sources confirm the issue affects Microsoft Dynamics 365 Field Service On-Premises version 7 (o...

9.8CVSS9.2AI score0.00884EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/31 11:00 p.m.24 views

CVE-2024-38182 Microsoft Dynamics 365 Elevation of Privilege Vulnerability

...

9CVSS9.2AI score0.00884EPSS
SaveExploits0References1
Rows per page
Query Builder