6320 matches found
Security Updates for Microsoft Dynamics 365 Business Central (August 2026)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...
CVE-2026-18403: Improper Neutralization of Special Elements used in an SQL Command
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-40375
CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...
EUVD-2026-56299
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-12571 Authentication Bypass Leading to Account Takeover
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-12571
The CVE-2026-12571 entry describes an authentication bypass in ManageEngine DDI Central’s password-reset workflow that enables account takeover. The NVD entry confirms a critical impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction) with high impact on confidentiality, integrity, and...
CVE-2026-12571 Authentication Bypass Leading to Account Takeover
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
EUVD-2026-56557
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
Update 28.2 for Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (Application Build 28.2.51034, Platform Build 28.0.50938)
None None...
Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)
None None...
CVE-2026-66763 Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)
SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful...
PT-2026-70365
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central affected versions not specified Description An authentication bypass exists in the password-reset workflow, which could allow an attacker to perform an account takeover. Recommendations At the moment, there is no...