CVE-2024-28200 N-central Authentication Bypass

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the...

CVE-2024-28200 N-central Authentication Bypass

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the...

CVE-2024-28200

The CVE-2024-28200 involves an authentication bypass in the N-central server user interface present in all deployments prior to version 2024.2. The N-central authentication bypass allows access to restricted UI areas without credentials. Connected sources confirm affected software: N-central prio...

CVE-2024-5322

The CVE-2024-5322 issue affects N-central prior to 2024.3 and enables session rebinding for already authenticated users when Entra SSO is used, potentially bypassing authentication. Reported across multiple feeds (NVD/Red Hat/PT-Security and others) with a high impact (C/H, I/H) and network attac...

CVE-2024-5322 N-central Authentication Bypass via Session Rebinding

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

CVE-2024-5322 N-central Authentication Bypass via Session Rebinding

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

N-able N-Central Security Vulnerability

N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability previously existed in N-able N-Central version 2024.3, which stemmed from the vulnerability to rebinding of authenticated user sessions when using Entra SSO, which could le...

N-able N-Central Security Vulnerability

N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability previously existed in N-able N-Central version 2024.2, which stemmed from a user interface authentication that could be bypassed...

PT-2024-22335

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2024.2 Description The issue concerns an authentication bypass of the user interface. It was discovered through an internal source code review, and there have been no observed exploitations in the wild...

PT-2024-35667 · N-Central · N-Central

Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2024.3 Description: The issue allows session rebinding of already authenticated users when using Entra SSO, potentially leading to authentication bypass. Recommendations: For versions prior to 2024.3, update to...

PT-2024-6653 · Zoho · Zoho Manageengine Servicedesk Plus +2

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14.8.20 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14.8.20 Zoho ManageEngine SupportCenter Plus versions prior to 14.8.20 Zoho ManageEngine Endpoint Central versions prior to...

CLSA-2024-1719568839 Update of linux-firmware

Update AMD CPU microcode to 2024-01-16: - Update AMD CPU microcode for processor family 19h: sig 0x00a00f11, sig 0x00a00f12;...

Malicious code in rbi-central (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7010 Malicious code in rbi-central (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mozilla-central (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bee454a894c37c1ab6f11580801deac1455d7114675e371cdec10ed8966f562 The OpenSSF Package Analysis project identified 'mozilla-central' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-2672 Malicious code in mozilla-central (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bee454a894c37c1ab6f11580801deac1455d7114675e371cdec10ed8966f562 The OpenSSF Package Analysis project identified 'mozilla-central' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the deserialization mechanism, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

central-fashion.com Cross Site Scripting vulnerability OBB-3937594

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...