CVE-2021-38868

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310...

The vulnerability of the Microsoft Power BI component of the Microsoft On-Premises Data Gateway allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Power BI local data gateway’s component is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 6

Package name: xms10.14.0.10628.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: May 2022 Languages supported: English US Important notes about this...

HPESBNW04285 rev.4 - Aruba Products, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform 8.2.14.0 and below Aruba Fabric Composer 6.2.0 and below Aruba ClearPass Policy Manager 6.10.4 and below, 6.9.10 and below, 6.8.9 without Hotf...

Explaining Cloud Native Application Security

By Owais Sultan Securing applications on-premises and on the cloud are two entirely different processes. The cloud provides plenty of benefits… This is a post from HackRead.com Read the original post: Explaining Cloud Native Application Security...

Vulnerabilities fixed in AWS patch solutions

Vulnerabilities have been fixed in several AWS patch solutions. These patch solutions were released by AWS to monitor for Java applications vulnerable to Log4Shell and patch these systems immediately. AWS has released three hotpatches released. A hot patch in the form of Debian or RPM packages th...

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-23259

CVE-2022-23259 is a remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. The affected product area is Dynamics 365 (on-premises) and the underlying issue enables an attacker over a network to execute arbitrary code with user-authorized privileges; authenticated access is req...

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

Design/Logic Flaw

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

KLA12510 Spoofing vulnerability in Microsoft SQL Server

A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23292 Related products Microsoft-Power-BI CVE list CVE-2022-23292 warning KB list Solution Install necessary updates from the KB section...

PT-2022-2665 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics 365. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Dynamics 365 输入验证错误漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises, which includes financial management, production management, and business intelligence management...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 8

Package name: xms10.13.0.10817.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only zReplaces: xms10.13.0.10723.bin, xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: April 2022 Languages...

On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...