6602 matches found
Security Bulletin: Due to the use of the gawk package, IBM CICS TX Advanced is vulnerable to a heap out-of-bounds flaw (CVE-2023-4156).
Summary IBM CICS TX Advanced is vulnerable to CVE-2023-4156 due to the use of the gawk package. The gawk package is used by IBM CICS TX Advanced to make it possible to handle simple data-reformatting jobs with just a few lines of code. An update to IBM CICS TX Advanced has been released to addres...
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...
Update 21.16 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.16.63199, Platform Build 21.0.63175)
None None...
Update 23.4 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.4.15715, Platform Build 23.0.15712)
None None...
Update 22.10 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.10.63195, Platform Build 22.0.63124)
None None...
CVE-2023-6072
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
CVE-2023-6072
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
Cross site scripting
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
CVE-2023-6072
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
CVE-2023-6072
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
Microsoft Dynamics Security Breach
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
PT-2024-14874 · Trellix · Trellix Central Management
Name of the Vulnerable Software and Affected Versions: Trellix Central Management versions prior to 9.1.3.97129 Description: A cross-site scripting issue allows a remote authenticated attacker to craft internal requests to the CM dashboard, causing arbitrary content to be injected into the respon...
PT-2024-1876 · Microsoft · Dynamics 365 Business Central
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central/NAV affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Microsoft Dynamics 365 Business Central. Exploitation of this issue may allow ...
Trellix Central Management Cross-Site Scripting Vulnerability
Trellix Central Management is a centralized management system from Trellix, Inc. It consolidates the management, reporting and data sharing of Trellix products into one easy-to-deploy system. A cross-site scripting vulnerability exists in Trellix Central Management prior to version 9.1.3.97129,...
CVE-2023-6072: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...
CVE-2024-21380: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...
Qsync Central File Permission Access
The vulnerability of the Qsync Central file synchronization application is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker who operates remotely to gain access to read, modify, or delete data...
CVE-2023-47132
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...