8531 matches found
Microsoft Security Update Validation Report June 2023
Microsoft’s June 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...
Citrix Virtual Apps and Desktops Improper Access Control (CTX559370)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by an improper access control vulnerability. Users with only access to launch VDA applications can launch an unauthorized desktop. This vulnerability is in the Windows Virtual Delivery Agent, which is...
CVE-2023-32024
Microsoft Power Apps Spoofing Vulnerability...
Spoofing
Microsoft Power Apps Spoofing Vulnerability...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
CVE-2023-32024
CVE-2023-32024: Microsoft Power Apps Spoofing Vulnerability. A remote attacker can spoof the user interface in Microsoft Power Apps (and related Dynamics context) due to a UI spoofing flaw. Impact is spoofing the UI to deceive users; no public exploitation details are confirmed in these sources. ...
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
...
CVE-2023-32024: Improper Neutralization of Input During Web Page Generation
Microsoft Power Apps Spoofing Vulnerability...
Windows and Linux Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2023-24490
A vulnerability has been identified that impacts Virtual Delivery Agents for Windows or Linux used by Citrix Virtual Apps and Desktops and Citrix DaaS. The vulnerability affects the following supported versions of Windows Virtual Delivery Agent: Current Release CR Citrix Virtual Apps and Desktops...
June 13, 2023—KB5027223 (OS Build 22000.2057)
None None...
Microsoft Power Apps Spoofing Vulnerability
...
PT-2023-3131 · Microsoft · Power Apps
Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Power Apps development environment. Exploitation of this issue may...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Power Apps and Dynamics. An authenticated malicious person could exploit the vulnerabilities to impersonate another user and execute arbitrary code execute arbitrary code with privileges of that user. Microsoft Power Apps:...
KLA60730 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Autodesk® FBX® SDK 20...
Microsoft Power Apps security vulnerabilities
Microsoft Power Apps is a low-code development platform from Microsoft Corporation USA designed to help users easily build customized enterprise-class applications. A security vulnerability exists in Microsoft Power Apps that stems from the presence of a spoofing vulnerability...
KLA50320 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Power Apps can be exploited remotely to spoof user interface. 2. A spoofing...
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
Impact There are two separate security vulnerabilities here: 1 a security vulnerability that allows users to read arbitrary files on the machines that are running shared Gradio apps 2 the ability of users to use machines that are sharing Gradio apps to proxy arbitrary URLs Patches Both problems...
CVE-2023-29751
An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...
