Lucene search
+L

3438 matches found

Vulnrichment
Vulnrichment
•added 2024/05/09 12:10 p.m.•17 views

CVE-2024-34550 WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in AlexaCRM Dynamics 365 Integration.This issue affects Dynamics 365 Integration: from n/a through 1.3.17...

5.3CVSS6.9AI score0.00584EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•17 views

PT-2024-25965 · Unknown · Alexacrm Dynamics 365 Integration

Name of the Vulnerable Software and Affected Versions: AlexaCRM Dynamics 365 Integration versions 1.3.17 and earlier Description: The issue concerns the insertion of sensitive information into log files, which could potentially expose confidential data. Recommendations: For AlexaCRM Dynamics 365...

5.3CVSS6.9AI score0.00584EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/05/07 9:15 a.m.•11 views

WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Dynamics 365 Integration versions = 1.3.17...

5.3CVSS7AI score0.00584EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/05/07 12:00 a.m.•21 views

WordPress Dynamics 365 Integration Plugin <= 1.3.17 is vulnerable to Sensitive Data Exposure

Software Dynamics 365 Integration Type Plugin Vulnerable versions = 1.3.17 Fixed in 1.3.18 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-34550 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2397ac5f5483 Credi...

5.3CVSS6.5AI score0.00584EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
•added 2024/04/03 6:49 a.m.•14 views

fluids.in Cross Site Scripting vulnerability OBB-3896855

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/03/22 12:00 a.m.•14 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...

7.6CVSS7.1AI score0.01078EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/03/12 5:15 p.m.•9 views

CVE-2024-21419

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

5.4CVSS5.8AI score0.01078EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/12 5:15 p.m.•39 views

CVE-2024-21419

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

7.6CVSS7.2AI score0.01078EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/12 5:15 p.m.•24 views

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

4.9CVSS6.7AI score0.01078EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/12 4:58 p.m.•23 views

CVE-2024-21419 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

7.6CVSS6.8AI score0.01078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/12 4:58 p.m.•51 views

CVE-2024-21419 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

7.6CVSS7.7AI score0.01078EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/12 4:58 p.m.•255 views

CVE-2024-21419

Microsoft Dynamics 365 (on-premises) 9.1 is affected by a Cross-site Scripting (XSS) vulnerability (CVE-2024-21419). The issue concerns the web UI and a vulnerability in the product’s handling of input that can spoof UI and potentially affect confidentiality/integrity. CVSS details from sources: ...

7.6CVSS7.6AI score0.01078EPSS
SaveExploits0References1Affected Software1
Microsoft KB
Microsoft KB
•added 2024/03/12 7:00 a.m.•73 views

Service Update 1.26 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

7.6CVSS7.5AI score0.01078EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/03/12 7:00 a.m.•45 views

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

7.6CVSS7.1AI score0.01078EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•41 views

Security Updates for Microsoft Dynamics 365 (on-premises) (March 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. An attacker can spoof a session to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relied...

7.6CVSS7.5AI score0.01078EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/12 12:00 a.m.•7 views

PT-2024-2294 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to perform cross-site scripting attacks using a specially...

7.6CVSS8.9AI score0.01078EPSS
SaveExploits0References7
NCSC
NCSC
•added 2024/03/12 12:00 a.m.•12 views

Vulnerability fixed in Microsoft Dynamics

Microsoft has fixed a vulnerability in Dynamics. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access sensitive data in the context of the victim's browser of the...

7.6CVSS6.7AI score0.01078EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/03/12 12:00 a.m.•12 views

Microsoft Dynamics 365 Security Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The vulnerability is...

7.6CVSS6.1AI score0.01078EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2024/03/12 12:00 a.m.•32 views

KLA65125 SUI vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-21419 Related products Microsoft-Dynamics-365 CVE list CVE-2024-21419 high KB list 5035697 Solution Install necessary...

7.6CVSS7.4AI score0.01078EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/28 12:00 a.m.•15 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in synchronization errors when using shared resources, allowing attackers to escalate their privileges.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created link...

8CVSS7.9AI score0.01725EPSS
SaveExploits0References3
Rows per page
Query Builder