CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

CVE-2024-35248

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

...

CVE-2024-35248

Summary of CVE-2024-35248 context : This is an Elevation of Privilege vulnerability reported in Microsoft Dynamics 365 Business Central . The entry is corroborated by multiple sources in the Connected documents including official MS security guidance and update references. Several Microsoft Knowl...

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

...

Update 24.1 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.1.19498, Platform Build 24.0.19487)

None None...

Update 22.13 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.13.64344, Platform Build 22.0.64336)

None None...

Microsoft Dynamics 365 代码问题漏洞

Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. A remote code execution vulnerability exists in Microsoft Dynamics 3...

PT-2024-4290

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Business Central affected versions not specified Description The issue is related to flaws in the deserialization mechanism of Microsoft Dynamics 365 Business Central, allowing a remote attacker to execute arbitrary code...

PT-2024-4201

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Business Central affected versions not specified Description The issue is related to deficiencies in the authentication procedure of Microsoft Dynamics 365 Business Central. Exploitation of this issue may allow a remote...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...

CVE-2024-35249: Deserialization of Untrusted Data

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability...

CVE-2024-35248: Weak Authentication

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

miniz:zip_fuzzer: Heap-buffer-overflow in mz_zip_mem_read_func

Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=5262100548091904 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzerasanminiz Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5040000000be...

AZL-42471 CVE-2024-37407 affecting package libarchive for versions less than 3.7.1-2

Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurpcentraldirectory in archivereadsupportformatzip.c...

Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnearble to denial of service due to json-path (CVE-2023-51074)

Summary B2B API of IBM Sterling B2B Integrator is vulnearble to denial of service due to json-path CVE-2023-51074. IBM Sterling B2B Integrator has remediated this vulnerabilty; Follow steps identified in Remediation/Fixes section to address vulnerability in your environment. Vulnerability Details...

Security Bulletin: IBM Workload Automation is potentially affected by a vulnerability in OpenSSL that might cause Denial of Service

Summary IBM Workload Automation is potentially affected by multiple vulnerabilities in OpenSSL that could cause Denial of Service CVE-2023-4807, CVE-2023-3817 Vulnerability Details CVEID:CVE-2023-4807 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a state corruption flaw in...

Golang < 1.21.11, 1.22.x < 1.22.4 Multiple Vulnerabilities

The version of Golang running on the remote host is prior to 1.21.11 or 1.22.x prior to 1.22.4. It is, therefore, is affected by multiple vulnerabilities: - archive/zip: mishandling of corrupt central directory record allows for the insertion of code and contents depending on the implementation...