1335 matches found
CVE-2023-41264
Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...
CVE-2023-41264
Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...
CVE-2023-5607
An improper limitation of a path name to a restricted directory path traversal vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI...
Path traversal
An improper limitation of a path name to a restricted directory path traversal vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI...
CVE-2023-5607: Improper Limitation of a Pathname to a Restricted Directory
An improper limitation of a path name to a restricted directory path traversal vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI...
The vulnerability of Microsoft On-Premises Data Gateways lies in security configuration errors, allowing attackers to circumvent security restrictions.
The vulnerability of Microsoft On-Premises Data Gateways is related to errors in security settings when processing certificates. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending a specially crafted web request...
Exploit for Path Traversal in Sysaid
Vulnerability Details 1. fofa: text body="sysaid-lo...
Security Updates for Microsoft Dynamics 365 (on-premises) (KB5032297) (November 2023)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2023-36410
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-36031
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-36021
Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...
CVE-2023-36016
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-36016 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2023-36016 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2023-36410 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
PT-2023-7193 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting...
Microsoft Dynamics 365 安全漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...