Lucene search
+L

3372 matches found

Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.5 views

PT-2023-1624 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to conduct a...

6.5CVSS8.5AI score0.00654EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.7 views

PT-2023-1439 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, which can lead to cross-site scripting attacks. An attacker c...

6.5CVSS6.6AI score0.00611EPSS
SaveExploits0References5
Kaspersky
Kaspersky
added 2023/02/14 12:0 a.m.34 views

KLA20227 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploite...

8CVSS7.3AI score0.00968EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.13 views

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...

5.4CVSS6.8AI score0.00609EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.9 views

Microsoft Dynamics 365和Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...

6.5CVSS7.2AI score0.00654EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.9 views

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...

5.4CVSS6.8AI score0.00609EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.5 views

PT-2023-1438 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, which can be exploited by an attacker to perform cross-site...

5.5CVSS8.8AI score0.00609EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.9 views

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...

5.4CVSS6.8AI score0.00609EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.10 views

Microsoft Dynamics 安全漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No information about this...

8CVSS8AI score0.00968EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.9 views

PT-2023-1796 · Microsoft · Dynamics 365 Unified Service Desk

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Unified Service Desk affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365 Unified Service Desk, which can be exploited by a remote attacker to...

10CVSS9.6AI score0.00968EPSS
SaveExploits0References6
Schneier on Security
Schneier on Security
added 2023/01/21 12:18 p.m.14 views

Publisher’s Weekly Review of A Hacker’s Mind

Publishers Weekly reviewed A Hackers Mind--and its a starred review! "Hacking is something that the rich and powerful do, something that reinforces existing power structures," contends security technologist Schneier Click Here to Kill Everybody in this excellent survey of exploitation. Taking a...

1.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:0 a.m.10 views

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Business Central software for managing small and medium-sized businesses, as well as the integrated enterprise management system Microsoft Dynamics NAV, is related to insufficient validation of input data. Exploiting this vulnerability could allow a...

8.5CVSS8AI score0.0157EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.15 views

The vulnerability of the Microsoft Dynamics CRM resource planning software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Dynamics CRM resource planning software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created queries...

9CVSS8.5AI score0.03236EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.11 views

The vulnerability of the Microsoft Dynamics CRM resource planning software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Dynamics CRM resource planning software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created queries...

9CVSS8.5AI score0.02405EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/14 12:0 a.m.97 views

Security Updates for Microsoft Dynamics NAV (Dec 2022)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

8.5CVSS8.3AI score0.0157EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/12/14 12:0 a.m.102 views

Security Updates for Microsoft Dynamics 365 Business Central (December 2022)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an remote code execution vulnerability. A remote attacker with admin privileges can exploit this vulnerability to execute malicious instructions on their behalf. Note that Nessus has no...

8.5CVSS8.4AI score0.0157EPSS
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
added 2022/12/13 9:24 p.m.131 views

Patch Tuesday - December 2022

As far as Patch Tuesdays go, defenders have a relatively light month to close out the year with only 48 CVEs being published by Microsoft today. This does not include the 24 previously disclosed vulnerabilities affecting their Chromium-based Edge browser. There are two zero-days in the mix today...

0.9AI score0.82081EPSS
SaveExploits7
OSV
OSV
added 2022/12/13 7:15 p.m.8 views

CVE-2022-41127

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises Remote Code Execution Vulnerability...

8.5CVSS5.9AI score0.0157EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/12/13 7:15 p.m.6 views

CVE-2022-41127

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises Remote Code Execution Vulnerability...

8.5CVSS5.9AI score0.0157EPSS
SaveExploits0References3Affected Software13
NVD
NVD
added 2022/12/13 7:15 p.m.20 views

CVE-2022-41127

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises Remote Code Execution Vulnerability...

8.5CVSS0.0157EPSS
SaveExploits0References1
Rows per page
Query Builder