CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 13/10/2021 |
| CVE-2021-36950 | 보통5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 12/08/2021 |
| CVE-2021-34524 | 높음8.1 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | 12/08/2021 |
| CVE-2021-24101 | 보통6.5 | Microsoft Dataverse Information Disclosure Vulnerability | 25/02/2021 |
| CVE-2020-17158 | 높음8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17152 | 높음8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17147 | 높음8.7 | Dynamics CRM Webclient Cross-site Scripting Vulnerability | 10/12/2020 |
| CVE-2020-17021 | 보통5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17018 | 보통5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17005 | 보통5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-16978 | 보통5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16956 | 보통5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16878 | 보통5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16872 | 높음7.6 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16871 | 보통5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16864 | 보통5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |