USN-6365-1 open-vm-tools vulnerability

It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker could possibly use this issue to bypass SAML token signature verification and perform VMware Tools Guest Operations...

Hive Pro Celebrates Remarkable Milestones in Securicom MSSP Partnership

HERNDON, VA., Sept. 13, 2023 - Hive Pro®, a pioneer vendor in Threat Exposure Management, is thrilled to announce significant achievements in its collaboration with Securicom, a customer-centric Global Managed IT Security Services Provider MSSP. This partnership marks a crucial step forward in...

Red Hat Enterprise Linux Security Vulnerabilities

Red Hat Enterprise Linux is a Linux operating system for business users from the American company Red Hat. Red Hat Enterprise Linux has a security vulnerability that stems from the fact that the tlsfuzzer code can still detect timing issues in RSA operations...

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2023-21521

An SQL Injection vulnerability in the Management Console Operator Audit Trail of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database, recover the...

Sql injection

An SQL Injection vulnerability in the Management Console? Operator Audit Trail of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database, recover the...

CVE-2023-21521

An SQL Injection vulnerability in the Management Console Operator Audit Trail of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database, recover the...

CVE-2023-21521

An SQL Injection vulnerability in the Management Console Operator Audit Trail of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database, recover the...

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

Cross site scripting

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800

CVE-2023-36800 is an XSS vulnerability affecting Microsoft Dynamics 365 (on-premises) / Dynamics 365 for Finance and Operations (on-premises) — specifically versions 9.0 and 9.1. The root cause is described as insufficient protection of the web page structure, enabling remote exploitation to spoo...

Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

Microsoft Dynamics Finance & Operations Cross-Site Scripting Vulnerability

Microsoft Dynamics Finance & Operations is an application from Microsoft Corporation USA. A Finance & Operations program. A security vulnerability exists in Microsoft Dynamics Finance & Operations. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Dynamics and Dynamics Finance & Operations. A malicious person could exploit them to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the context of the...

CVE-2023-36800: Improper Neutralization of Input During Web Page Generation

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

PT-2023-5002 · Microsoft · Dynamics 365 For Finance/Operations

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations affected versions not specified Description: The issue is related to insufficient protection of the web page structure, which can allow a remote attacker to perform cross-site scripting attack...

CVE-2023-4307

The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack...