Lucene search
+L

1140 matches found

Prion
Prion
added 2022/12/13 7:15 p.m.30 views

Remote code execution

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises Remote Code Execution Vulnerability...

4.6CVSS8.4AI score0.0157EPSS
SaveExploits0References1Affected Software2
Microsoft KB
Microsoft KB
added 2022/12/13 4:0 p.m.36 views

Update 19.14 for Microsoft Dynamics 365 Business Central (on-premises) 2021 Release Wave 2 (Application Build 19.14.49970, Platform Build 19.0.49925)

None None...

8.5CVSS7.3AI score0.0157EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/12/13 12:0 a.m.48 views

CVE-2022-41127 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

...

8.5CVSS8.6AI score0.0157EPSS
SaveExploits0References1
Elastic
Elastic
added 2022/12/09 7:18 p.m.11 views

Kibana 7.17.8 and 8.5.0 Security Update

Update Log 2022-12-23 : Updated impact section with additional details. 2023-01-09 : Updated impact section to include RHEL 2023-01-23 : Updated impact section with additional details. Updated Solutions and Mitigations section with new mitigation option. Updated Affected Versions section. Kibana...

8.8CVSS8.8AI score0.1372EPSS
SaveExploits2
OSV
OSV
added 2022/11/16 1:15 p.m.6 views

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

9.8CVSS6.1AI score0.08087EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/16 1:15 p.m.35 views

Server side request forgery (ssrf)

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

7.5CVSS9.7AI score0.08087EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/16 12:0 a.m.7 views

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

9.8CVSS9.8AI score0.08087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/16 12:0 a.m.8 views

PT-2022-24997 · Sophos · Sophos Mobile

Name of the Vulnerable Software and Affected Versions: Sophos Mobile versions 5.0.0 through 9.7.4 Description: An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises. This issue may lead to significant...

9.8CVSS7.7AI score0.08087EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
added 2022/11/08 4:0 p.m.70 views

Update 21.1 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.1.48638, Platform Build 21.0.48504)

None None...

4.4CVSS6.2AI score0.01066EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/11/08 4:0 p.m.44 views

Cumulative Update 41 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.42.49347, Platform Build 14.0.49339)

None None...

4.4CVSS6.2AI score0.01066EPSS
SaveExploits0
Wiz blog
Wiz blog
added 2022/11/07 1:56 p.m.21 views

Wiz introduces VMware vSphere support to provide a unified hybrid cloud security platform

vSphere integration makes Wiz the first cloud security platform to protect both on-premises and cloud environments without an agent...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2022/10/10 12:0 a.m.7 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. An elevation of privilege vulnerability exists in the 2019 on-prem, SaaS version of Trend Micro Apex One, which stems from the use of local time for Vulnerability Protection Service checks, which could be exploited to...

7CVSS6.8AI score0.00183EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/10 12:0 a.m.25 views

Trend Micro Apex One 缓冲区错误漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. An out-of-bounds access vulnerability exists in the 2019 on-prem, SaaS version of Trend Micro Apex One, which could be exploited by an attacker to create specially crafted messages to cause memory corruption in a...

7CVSS6.5AI score0.00659EPSS
SaveExploits0References3
CISA
CISA
added 2022/09/30 12:0 a.m.161 views

Microsoft Releases Guidance on Zero-Day Vulnerabilities in Microsoft Exchange Server

Microsoft has released Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server. According to the blog post, “Microsoft is aware of limited targeted attacks using the two vulnerabilities to get into users’ systems.” The two vulnerabilities are CVE-2022-41040 and...

1.9AI score0.9997EPSS
SaveExploits16References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 8:48 p.m.22 views

Security Bulletin: Security vulnerability in WebSphere Application Server Liberty shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-39031)

Summary IBM WebSphere Application Server Liberty is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server Liberty is vulnerable to Identity Spoofing CVE-2022-22475. Vulnerability Details Refer to the security bulletins...

8.8CVSS6.8AI score0.02017EPSS
SaveExploits0Affected Software1
Citrix
Citrix
added 2022/09/20 12:0 a.m.13 views

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 8

Package name: xms10.14.0.10813.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: September 2022 Languages...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.9 views

Trend Micro Apex One 授权问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex One version 2024 On-prem SaaS, which stems from the fact that if a remote attacker sends a specially crafted request to the affected product, it could bypass the...

9.8CVSS7.7AI score0.02261EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.10 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. A security vulnerability exists in the Trend Micro Apex One 2022 On-prem SaaS version, which stems from the possibility that an attacker who is able to log in to the system where the affected product is installed could...

7.8CVSS7.3AI score0.0034EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.7 views

Trend Micro Apex One 后置链接漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex One version 2023 On-prem SaaS, which stems from the possibility that an attacker who is able to log into a system where the affected product is installed could gain...

7.3CVSS7.3AI score0.00444EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/09/13 7:15 p.m.3 views

CVE-2022-35805

Microsoft Dynamics CRM on-premises Remote Code Execution Vulnerability...

8.8CVSS7.6AI score0.02504EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder