254 matches found
CVE-2025-64657
Azure Application Gateway Elevation of Privilege (CVE-2025-64657) is described as a stack-based overflow that allows an unauthenticated, network-based attacker to escalate privileges. Affected component: Azure App Gateway. Root cause: stack-based overflow. CVSSv3.1: 9.8 (CRITICAL), Network vector...
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
EUVD-2025-199684
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64656
CVE-2025-64656 affects Microsoft Azure Application Gateway. An out-of-bounds read allows an unauthenticated attacker to elevate privileges over the network. Affected versions for Application Gateway are 9.4–9.8; the provided sources recommend updating to a fixed version, but no specific patched v...
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64657: Out-of-bounds Write
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64656: Out-of-bounds Read
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Microsoft Application Gateway Elevation of Privilege Vulnerability
Microsoft Application Gateway is an application gateway from Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in Microsoft Application Gateway, which can be exploited by an attacker to elevate privileges...
Azure Application Gateway Elevation of Privilege Vulnerability
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Azure Application Gateway Elevation of Privilege Vulnerability
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
PT-2025-47651
Name of the Vulnerable Software and Affected Versions Application Gateway versions 9.4 through 9.8 Description An out-of-bounds read issue exists in Application Gateway, potentially allowing an unauthorized attacker to elevate privileges over a network. The issue enables an attacker to escalate...
PT-2025-47652
Name of the Vulnerable Software and Affected Versions Azure Application Gateway affected versions not specified Description A stack-based buffer overflow exists in Azure Application Gateway. This allows an unauthorized attacker to elevate privileges over a network. The issue requires no...
Microsoft Application Gateway 缓冲区错误漏洞
Microsoft Application Gateway is an application gateway from Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in Microsoft Application Gateway, which can be exploited by an attacker to elevate privileges...
Security Bulletin: Security vulnerability has been found in IBM Application Gateway
Summary Security vulnerability has been addressed in IBM Application Gateway. Vulnerability Details CVEID:CVE-2023-52425 DESCRIPTION: libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple...
agent-runtime-server (>=0.0.8, <=0.1.1), ai-application-gateway (>=0.1.1, <=0.1.5) +126 more potentially affected by CVE-2025-62611 via aiomysql (>=0.0.9, <=0.2.0)
aiomysql PYPI version =0.0.9, =0.0.8, =0.1.1, =0.0.1, =1.9.0, =2.10.0, =0.1.0, =0.0.2, =1.0.5, =0.0.154, =0.1.0, =0.1.0, =1.1.1, =3.13.4 and more Source cves: CVE-2025-62611 Source advisory: GHSA-R397-FF8C-WV2G...
CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection
Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmcsync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the...