862 matches found
CVE-2023-38176
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
CVE-2023-38176
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
CVE-2023-38176
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
Privilege escalation
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...
CVE-2023-38176
CVE-2023-38176 is an elevation-of-privilege vulnerability in Azure Arc-Enabled Servers. Multiple sources (NVD, CNVD, MSRC advisories, and NCSc) confirm it allows an attacker to gain elevated privileges within the affected Arc environment (Azure Arc-Enabled Servers). The issue is categorized as an...
CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
...
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
...
PT-2023-26323 · Microsoft · Azure Arc-Enabled Servers
Name of the Vulnerable Software and Affected Versions: Azure Arc-Enabled Servers affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially gaining access gain access to sensitive data in the victim's context, or execute code with the victim's privileges. Successful exploitation...
Microsoft Azure Arc 安全漏洞
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. A privilege full vulnerability exists in Microsoft Azure Arc. An attacker can exploit this vulnerability to gain elevated privileges on the system...
arc-c.ca Cross Site Scripting vulnerability OBB-3549582
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
AZL-26876 CVE-2023-31147 affecting package python-gevent for versions less than 21.1.2-3
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...
CVE-2022-35798
Azure Arc Jumpstart Information Disclosure Vulnerability...
CVE-2022-35798
Azure Arc Jumpstart Information Disclosure Vulnerability...
Information disclosure
Azure Arc Jumpstart Information Disclosure Vulnerability...
CVE-2022-35798 Azure Arc Jumpstart Information Disclosure Vulnerability
...
CVE-2022-35798
CVE-2022-35798 concerns Azure Arc Jumpstart. In the connected PT-2022-4401 entry, the issue is described as an information-disclosure vulnerability through registration files, potentially allowing an attacker to gain unauthorized access to protected information. Exploitation details, affected ver...
CVE-2022-35798 Azure Arc Jumpstart Information Disclosure Vulnerability
...
arc-intl.com Cross Site Scripting vulnerability OBB-3296920
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
