Autodesk Customer Portal Security Vulnerability

Autodesk Customer Portal is a customer portal component from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Customer Portal that stems from allowing cases created by a user under one account to view cases created by other users under the same account...

WordPress Plugin WP Customer Reviews Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-27822 · Autodesk · Autodesk Customer Support Portal

Name of the Vulnerable Software and Affected Versions: Autodesk Customer Support Portal affected versions not specified Description: The issue allows cases created by users under an account to be visible to other users on the same account, potentially exposing sensitive information...

Why less is more: 10 steps to secure customer data

In an advisory aimed at the protection of customers’ personal data, the Australian Cyber Security Centre ACSC has emphasized that businesses should only collect personal data from customers that they need in order to operate effectively. While that may seem like kicking in an open door, it’s real...

Malicious code in customer-journey-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611ae83fb22fa782fc27b23da9fb90fe5956c5e0008d94818de724f3c6b60c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8543 Malicious code in customer-journey-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611ae83fb22fa782fc27b23da9fb90fe5956c5e0008d94818de724f3c6b60c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-36007

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

CVE-2023-36007

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

Spoofing

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

CVE-2023-36007 Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

...

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

...

PT-2023-7195 · Microsoft · Dynamics 365 Customer Voice

Name of the Vulnerable Software and Affected Versions: Dynamics 365 Customer Voice affected versions not specified Description: The issue is related to errors in the representation of information in the user interface of the Microsoft Dynamics 365 Customer Voice application. Exploitation of this...

sos bugfix update

An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...

CVE-2023-45380

In the module "Order Duplicator " Clone and Delete Existing Order" orderduplicate in version = 1.1.7 from Silbersaiten for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can download personal information from...

CVE-2023-45380

In the module "Order Duplicator " Clone and Delete Existing Order" orderduplicate in version = 1.1.7 from Silbersaiten for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can download personal information from...

Okta breach happened after employee logged into personal Google account

Okta has revealed details about a recent breach which exposed files belonging to customers. As we explained in our article about 1Password being a victim of this breach, it’s normal for Okta support to ask customers to upload a file known as an HTTP Archive HAR file. Having this file allows the...

PrestaShop Advanced Export Products Orders Cron CSV Excel Security Vulnerability

PrestaShop SmartSoft Advanced Export is a PrestaShop order export module from PrestaShop. A security vulnerability exists in PrestaShop Advanced Export Products Orders Cron CSV Excel prior to v4.4.7, which stems from a vulnerability that allows an unauthenticated attacker to arbitrarily download...

PT-2023-29537 · Prestashop · Order Duplicator Module

Name of the Vulnerable Software and Affected Versions: Order Duplicator module for PrestaShop versions = 1.1.7 Description: The issue allows a guest to download personal information without restriction due to a lack of permissions control. This includes accessing data from the ps customer and ps...

PrestaShop Order Duplicator Security Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image zoom and other features. A security vulnerability exists in PrestaShop Order Duplicator - Clone and Delete Existing Order...

Automatic Conditional Access policies in Microsoft Entra streamline identity protection

Extending our commitment to help customers be secure by default, today were announcing the auto-rollout of Microsoft Entra Conditional Access policies that will automatically protect tenants based on risk signals, licensing, and usage. Weve designed these policies based on our deep knowledge of t...