127 matches found
CVE-2024-38139 Microsoft Dataverse Elevation of Privilege Vulnerability
...
CVE-2024-38139 Microsoft Dataverse Elevation of Privilege Vulnerability
...
Microsoft Dataverse Elevation of Privilege Vulnerability
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
PT-2024-7116 · Microsoft · Dataverse
Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to improper authentication in Microsoft Dataverse, allowing an authorized attacker to elevate privileges over a network. This can potentially lead to...
Microsoft Dataverse Authorization Issues Vulnerabilities
Microsoft Dataverse is a cloud-based data platform from Microsoft Corporation USA. It is used to share, save, reference, explore and analyze research data. An authorization issue vulnerability exists in Microsoft Dataverse, which arises from improper authentication, allowing an authorized attacke...
KLA74055 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dataverse can be exploited remotely t...
CVE-2024-38139: Improper Authentication
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
Microsoft Dataverse Code Execution
The vulnerability of the Microsoft Dataverse data management platform is related to the use of an unreliable search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
CVE-2024-35260 Microsoft Dataverse Remote Code Execution Vulnerability
...
CVE-2024-35260 Microsoft Dataverse Remote Code Execution Vulnerability
...
CVE-2024-35260
CVE-2024-35260 affects Microsoft Dataverse. An authenticated attacker can exploit an untrusted search path to execute code over the network, enabling remote code execution. Affected product: Microsoft Dataverse (Power Platform). Root cause: untrusted search path vulnerability. Impact: arbitrary c...
Microsoft Dataverse Remote Code Execution Vulnerability
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
PT-2024-5105
Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. The vulnerability is related to the use of an...
CVE-2024-35260: Untrusted Search Path
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
remote code execution via git repo provider
Impact A remote code execution vulnerability has been identified in BinderHub, where providing BinderHub with maliciously crafted input could execute code in the BinderHub context, with the potential to egress credentials of the BinderHub deployment, including JupyterHub API tokens, kubernetes...
CVE-2021-24101
Microsoft Dataverse Information Disclosure Vulnerability...