CVE-2023-38167

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

CVE-2023-38167

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Dynamics Business Central Elevation Of Privilege Vulnerability...

CVE-2023-38167

CVE-2023-38167 is an elevation-of-privilege vulnerability affecting Microsoft Dynamics 365 Business Central (2023 Release Wave 1) as documented by multiple sources. The issue is reported as enabling an attacker with high privileges to obtain elevated rights (impact: high; CVSS 3.1: AV:N/AC:L/PR:H...

Update 22.4 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.4.59535, Platform Build 22.0.59520)

None None...

PT-2023-4314 · Microsoft · Dynamics 365 Business Central

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Business Central affected versions not specified Description: The issue is related to insufficient access control in Microsoft Dynamics 365 Business Central, which can allow an attacker to elevate their privileges...

Microsoft Dynamics Business Central 安全漏洞

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management and supply chain management. An elevation of privilege vulnerability exists in Microsoft Dynamics Business Central, which can...

CVE-2023-30297

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server...

CVE-2023-30297

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server...

Code injection

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server...

"Mysterious Team Bangladesh" Targeting India with DDoS Attacks and Data Breaches

A hacktivist group known as Mysterious Team Bangladesh has been linked to over 750 distributed denial-of-service DDoS attacks and 78 website defacements since June 2022. "The group most frequently attacks logistics, government, and financial sector organizations in India and Israel,"...

CVE-2023-30297

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server...

N-able Technologies N-central Server Security Vulnerability

N-able Technologies N-central Server is a comprehensive Remote Monitoring and Management RMM solution from US-based N-able Technologies. A security vulnerability exists in N-able Technologies N-central Server prior to version 2023.4, which originates from the execution of arbitrary code via the...

CVE-2023-30297

The CVE-2023-30297 entry concerns N-able Technologies N-central Server prior to version 2023.4. The issue allows a local attacker to execute arbitrary code through the server’s monitoring function. The root cause is a vulnerability in the monitoring feature that enables code execution with low pr...

PT-2023-22625 · Alt N Technologies · N-Central Server

Name of the Vulnerable Software and Affected Versions: N-able Technologies N-central Server versions prior to 2023.4 Description: The issue allows a local attacker to execute arbitrary code via the monitoring function of the server. Recommendations: For versions prior to 2023.4, update to version...

directory.centralbuckschamber.com Cross Site Scripting vulnerability OBB-3561377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Vulnerability in certifi-2018.4.16-py2.py3 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2022-23491]

Summary The certifi-2018.4.16-py2.py3 package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2022-23491. Vulnerability Details CVEID:CVE-2022-23491 DESCRIPTION: An unspecified error in with TrustCor's ownership also operated a...

Security Bulletin: CVE-2023-0465 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-0465 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable vulnerabilities. Vulnerability Details CVEID:CVE-2023-0465 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw when using a non-defau...

PT-2023-4351 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to build 6481 Trend Micro Apex Central 2019 version = Build 6394 Description: The issue is related to insufficient validation of incoming requests in the modDeepSecurity widget of the monitoring panel o...

PT-2023-4354 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central version 2019 = Build 6394 Description: The issue is related to insufficient validation of incoming requests in the modTMSL widget monitoring panel module of Trend Micro Apex Central, a security monitoring and manageme...