116 matches found
Microsoft Dataverse 授权问题漏洞
Microsoft Dataverse is a cloud-based data platform from Microsoft Corporation USA. It is used to share, save, cite, explore and analyze research data. Microsoft Dataverse suffers from an authorization issue vulnerability that stems from improper authentication and allows an authorized attacker to...
CVE-2025-24053: Improper Authorization
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
PT-2025-11216 · Microsoft · Dataverse
Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about ...
November Microsoft Patch Tuesday
November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...
The vulnerability of the Microsoft Dataverse data management platform, related to the absence of authentication procedures that prevent unauthorized access to protected information.
The vulnerability of the Microsoft Dataverse data management platform is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Microsoft Dataverse data management platform, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dataverse data management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as CVE-2024-9486 CVSS score: 9.8, has been addressed in version 0.1.38. The project maintainers...
CVE-2024-38139
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
CVE-2024-38139
Microsoft Dataverse contains an elevation of privilege vulnerability due to improper authentication. An authorized attacker could elevate privileges over the network. Affected component/function is Dataverse authentication/auth checks. Underlying impact includes high confidentiality and integrity...
CVE-2024-38139 Microsoft Dataverse Elevation of Privilege Vulnerability
...
CVE-2024-38139 Microsoft Dataverse Elevation of Privilege Vulnerability
...
Microsoft Dataverse Elevation of Privilege Vulnerability
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
Microsoft Dataverse 授权问题漏洞
Microsoft Dataverse is a cloud-based data platform from Microsoft Corporation USA. It is used to share, save, reference, explore and analyze research data. An authorization issue vulnerability exists in Microsoft Dataverse, which arises from improper authentication, allowing an authorized attacke...
KLA74055 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dataverse can be exploited remotely t...
CVE-2024-38139: Improper Authentication
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
PT-2024-7116 · Microsoft · Dataverse
Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to improper authentication in Microsoft Dataverse, allowing an authorized attacker to elevate privileges over a network. This can potentially lead to...
The vulnerability of the Microsoft Dataverse data management platform, related to the use of an unreliable search path, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Dataverse data management platform is related to the use of an unreliable search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...
CVE-2024-35260
CVE-2024-35260 affects Microsoft Dataverse. An authenticated attacker can exploit an untrusted search path to execute code over the network, enabling remote code execution. Affected product: Microsoft Dataverse (Power Platform). Root cause: untrusted search path vulnerability. Impact: arbitrary c...