6597 matches found
MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)
--- -= Per source details. Do not edit below this line.=-...
Microsoft Dynamics 365 Business Central Code Execution
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
central-fashion.com Cross Site Scripting vulnerability OBB-3937594
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Dynamics 365 Business Central Auth Bypass Privilege Escalation
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...
CVE-2024-36115 Stored Cross site scripting in Reposilite artifacts
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The problem lies i...
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...
CVE-2024-5731
CVE-2024-5731 affects Trellix IPS Manager, Central Manager, and Local Manager communications. The vulnerability arises from the request flow where an attacker can manipulate a parameter to change the destination of a request, exposing sensitive information. Current documents provide high-level im...
Trellix IPS Manager Security Vulnerability
Trellix IPS Manager is a next-generation IPS for local and virtual networks from FireEye Trellix USA. A security vulnerability exists in Trellix IPS Manager, Central Manager, and Local Manager. An attacker could exploit the vulnerability to obtain sensitive information...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...
PT-2024-37107
Name of the Vulnerable Software and Affected Versions: IPS Manager, Central Manager, and Local Manager affected versions not specified Description: A vulnerability in the communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby...
CVE-2024-5731: Missing Encryption of Sensitive Data
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...
Security Bulletin: Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29881)
Summary There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application. CVE-2024-29881. Vulnerability Details CVEID:CVE-2024-29881 DESCRIPTION: TinyMCE is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the external SVG...
SUSE CVE-2024-37407
Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurpcentraldirectory in archivereadsupportformatzip.c...
PT-2024-40794
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the involvement of mz zip mem read func, mz zip reader...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics and Dynamics Business Central. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code with potentially elevated privileges and gain access to sensitive data in the application. For...
Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)
Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...
CVE-2024-35249
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...