Lucene search
+L

5683 matches found

BDU FSTEC
BDU FSTEC
added 2024/06/20 12:00 a.m.25 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

7.5CVSS5.4AI score0.00945EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/06/19 5:37 p.m.62 views

CVE-2024-36115 Stored Cross site scripting in Reposilite artifacts

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The problem lies i...

7.1CVSS0.00828EPSS
SaveExploits0References4
NVD
NVD
added 2024/06/14 2:15 p.m.18 views

CVE-2024-5731

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...

6.8CVSS0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/14 1:57 p.m.26 views

CVE-2024-5731

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...

6.8CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/14 1:57 p.m.59 views

CVE-2024-5731

CVE-2024-5731 affects Trellix IPS Manager, Central Manager, and Local Manager communications. The vulnerability arises from the request flow where an attacker can manipulate a parameter to change the destination of a request, exposing sensitive information. Current documents provide high-level im...

6.8CVSS6.8AI score0.00272EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/14 12:00 a.m.5 views

Trellix IPS Manager Security Vulnerability

Trellix IPS Manager is a next-generation IPS for local and virtual networks from FireEye Trellix USA. A security vulnerability exists in Trellix IPS Manager, Central Manager, and Local Manager. An attacker could exploit the vulnerability to obtain sensitive information...

6.8CVSS6.3AI score0.00272EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/06/14 12:00 a.m.53 views

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...

7.3CVSS7.5AI score0.00945EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/06/12 3:54 p.m.27 views

Security Bulletin: Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29881)

Summary There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application. CVE-2024-29881. Vulnerability Details CVEID:CVE-2024-29881 DESCRIPTION: TinyMCE is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the external SVG...

6.1CVSS5AI score0.00713EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2024/06/12 3:11 a.m.5 views

SUSE CVE-2024-37407

Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurpcentraldirectory in archivereadsupportformatzip.c...

9.1CVSS7AI score0.00971EPSS
SaveExploits1References3
NCSC
NCSC
added 2024/06/11 6:23 p.m.11 views

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Dynamics and Dynamics Business Central. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code with potentially elevated privileges and gain access to sensitive data in the application. For...

8.8CVSS7.7AI score0.03401EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/06/11 5:31 p.m.30 views

Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)

Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...

7.5CVSS8.3AI score0.02006EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2024/06/11 5:16 p.m.1 views

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.03401EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 5:16 p.m.26 views

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

8.8CVSS0.03401EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/06/11 5:16 p.m.5 views

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

8.8CVSS5.5AI score0.03401EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2024/06/11 5:16 p.m.1 views

CVE-2024-35248

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

7.3CVSS5.8AI score0.00945EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/11 5:00 p.m.113 views

CVE-2024-35248

Summary of CVE-2024-35248 context : This is an Elevation of Privilege vulnerability reported in Microsoft Dynamics 365 Business Central . The entry is corroborated by multiple sources in the Connected documents including official MS security guidance and update references. Several Microsoft Knowl...

7.3CVSS7.2AI score0.00945EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/11 5:00 p.m.44 views

CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

...

7.3CVSS0.00945EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/06/11 2:00 p.m.32 views

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.03401EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/06/11 2:00 p.m.54 views

Update 24.1 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.1.19498, Platform Build 24.0.19487)

None None...

8.8CVSS7.6AI score0.03401EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/06/11 2:00 p.m.45 views

Update 22.13 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.13.64344, Platform Build 22.0.64336)

None None...

8.8CVSS7.1AI score0.03401EPSS
SaveExploits0
Rows per page
Query Builder