6602 matches found
Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Analytics System [CVE-2022-23308]
Summary Redhat provided libxml2 is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-23308 Vulnerability Details CVEID:CVE-2022-23308 DESCRIPTION: libxml2 is vulnerable to a denial of service, caused by a use-after-free in the ID an...
Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [ CVE-2021-33574]
Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2021-33574 Vulnerability Details CVEID:CVE-2021-33574 DESCRIPTION: GNU C Library aka glibc is vulnerable to a denial of service, caused by a use-after-fre...
CVE-2024-20510
A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...
CVE-2024-20510: Incorrect Authorization
A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...
Moxa MXview One
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Moxa Equipment : MXview One, MXview One Central Manager Series Vulnerabilities : Cleartext Storage In A File or On Disk, Path Traversal, Time-of-Check Time-of-Use Race Condition 2. RISK...
Microsoft Dynamics 365 Business Central Auth Bypass Privilege Escalation
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to bypass the authentication process and increase their privileges...
CVE-2024-43460
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...
CVE-2024-43460 Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2024-43460 Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
Dynamics 365 Business Central Elevation of Privilege Vulnerability
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...
CVE-2024-43460: Improper Authorization
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...
HPESBNW04709 rev.1 - HPE Aruba Networking Controller and Gateway-Based AOS Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. ArubaOS Wi-Fi Controllers and Gateways : Please refer to the Affected Products section above under Vulnerability Summary. Affected Products HPE Aruba Networking Mobility...
PT-2024-9885
Name of the Vulnerable Software and Affected Versions: Dynamics 365 Business Central affected versions not specified Description: The issue is related to improper authorization in Dynamics 365 Business Central, allowing an authenticated attacker to elevate privileges over a network. This can be...
Microsoft Dynamics 365 安全漏洞
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...
KLA73440 PE vulnerability in Microsoft Dynamics
An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43460 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-43460 critical Solution Install necessary updates...
PT-2024-7629 · Sophos · Sophos Intercept X
Name of the Vulnerable Software and Affected Versions: Sophos Intercept X for Windows with Central Device Encryption versions 2024.2.0 and earlier Description: A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption allows writing of arbitrary...
New Android Malware Ajina.Banker Steals 2FA Codes, Spreads via Telegram
A new Android malware called Trojan Ajina.Banker is targeting Central Asia - Discover how this malicious malware disguises…...
New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram
Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2023 with the goal of harvesting financial information and intercepting two-factor authentication 2FA messages. Singapore-headquartered Group-IB, which...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CNVD-2024-40536)
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...