EUVD-2025-199872

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue...

CVE-2025-59792 Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue...

CVE-2025-59792 Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue...

CVE-2025-59792 Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue...

CVE-2025-59792

The distributed key-value NoSQL database Apache Kvrocks is vulnerable to an information disclosure flaw in the MONITOR command . This vulnerability allows an attacker to obtain sensitive information by exposing plaintext credentials . The issue affects versions 1.0.0 through 2.13.0 . To resolve t...

PT-2025-48340

Name of the Vulnerable Software and Affected Versions Apache Kvrocks versions 1.0.0 through 2.13.0 Description The MONITOR command in Apache Kvrocks has a flaw that can expose plaintext credentials. This issue affects versions 1.0.0 through 2.13.0. Recommendations Upgrade to version 2.14.0 to...

Apache Kvrocks 安全漏洞

Apache Kvrocks is a distributed key-value NoSQL database from the Apache USA Foundation. Apache Kvrocks suffers from an information disclosure vulnerability that stems from the MONITOR command disclosing plaintext credentials. An attacker could exploit this vulnerability to obtain sensitive...

CVE-2025-59792: Cleartext Storage of Sensitive Information

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue...

Schneider Electric PowerChute Serial Shutdown < 1.4.0 Multiple Vulnerabilities

The version of Schneider Electric PowerChute Serial Shutdown installed on the remote host is prior to 1.4.0. It is, therefore, affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that...

The vulnerability of the devfreq_monitor() function in the drivers/devfreq/devfreq.c driver module allows a hacker to cause a system failure. This vulnerability relates to the dynamic frequency and voltage scaling support of the Linux kernel, which can be exploited by attackers.

The vulnerability of the devfreqmonitor function in the drivers/devfreq/devfreq.c driver module, which supports dynamic scaling of voltage and frequency DVFS for the Linux operating system’s kernel, stems from the execution of a loop with an unreachable exit condition. Exploiting this vulnerabili...

CVE-2025-62207

Azure Monitor Elevation of Privilege Vulnerability...

EUVD-2025-198369

Azure Monitor Elevation of Privilege Vulnerability...

CVE-2025-62207

Azure Monitor Elevation of Privilege Vulnerability...

CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability

...

CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability

...

CVE-2025-62207

Azure Monitor Elevation of Privilege Vulnerability...

CVE-2025-62207

CVE-2025-62207 is an Azure Monitor Elevation of Privilege vulnerability affecting the Azure Monitor Control Service. Public sources describe a remote, low-complexity attack that achieves elevation of privileges with no user interaction. CVSS shows high impact to confidentiality, integrity, and av...

Mozilla Says It’s Finally Done With Two-Faced Onerep

In March 2024, Mozilla said it was winding down its collaboration with Onerep -- an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites -- after KrebsOnSecurity revealed Onerep's founder had created dozens of...

Azure Monitor Elevation of Privilege Vulnerability

...

Microsoft Azure Monitor 代码问题漏洞

Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an elevation of privilege vulnerability...