Lucene search
+L

434 matches found

BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•17 views

The vulnerability of the Azure App Services component of the Azure Stack software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure App Services component of the Azure Stack software platform exists due to errors in memory object processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the NT AUTHORITY/SYSTEM context remotely...

10CVSS5.9AI score0.18542EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2019/10/10 2:15 p.m.•23 views

CVE-2019-1372

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

10CVSS8.3AI score0.18542EPSS
SaveExploits0References2
Prion
Prion
•added 2019/10/10 2:15 p.m.•32 views

Remote code execution

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

10CVSS9.7AI score0.18542EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/10/10 1:28 p.m.•175 views

CVE-2019-1372

Azure Stack/Azure App Service on Azure Stack is affected by CVE-2019-1372 due to failing to check the length of a buffer before copying memory, enabling a remote code execution that could run code as NT AUTHORITY\SYSTEM inside the sandbox. Public documents consistently describe an RCE by sanitizi...

10CVSS9.7AI score0.18542EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/10/10 1:28 p.m.•55 views

CVE-2019-1372

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

9.8AI score0.18542EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/10 12:00 a.m.•6 views

CVE-2019-1372: Undefined Security Weakness

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...

10CVSS9.1AI score0.18542EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2019/10/08 7:00 a.m.•64 views

Azure Stack Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Azure Stack fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system...

10CVSS3.4AI score0.18542EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/10/08 12:00 a.m.•3 views

PT-2019-3648

Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description A remote code execution issue exists due to improper memory object handling in Azure App Service on Azure Stack. This allows an attacker to execute code in the context of NT...

10CVSS0.18542EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2019/10/08 12:00 a.m.•49 views

KLA11575 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Stack can be exploited remote...

10CVSS8AI score0.18542EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2018/12/04 12:00 a.m.•15 views

The vulnerability of the Azure App Services component of the Azure Stack software platform allows a hacker to inject arbitrary code into the web pages that users view.

The vulnerability of Azure App Services on the cloud platform exists because measures to protect the structure of web pages have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web pages that users view...

6.4CVSS8.1AI score0.02299EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2018/11/16 12:00 a.m.•12 views

Microsoft Azure App Services on Azure Stack Cross-Site Scripting Vulnerability

Microsoft Azure App Services on Azure Stack is a suite of Platform-as-a-Service PaaS solutions from Microsoft Corporation USA. The product supports the creation of Web, API, and Azure applications for multiple platforms and devices. A cross-site scripting vulnerability exists in Microsoft Azure A...

6.1CVSS6.4AI score0.02299EPSS
SaveExploits0References1
NVD
NVD
•added 2018/11/14 1:29 a.m.•32 views

CVE-2018-8600

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

6.1CVSS5.9AI score0.02299EPSS
SaveExploits0References2
Prion
Prion
•added 2018/11/14 1:29 a.m.•22 views

Cross site scripting

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

4.3CVSS6AI score0.02299EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2018/11/14 1:29 a.m.•7 views

CVE-2018-8600

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

6.1CVSS5.5AI score0.02299EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/11/14 1:00 a.m.•41 views

CVE-2018-8600

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

5.9AI score0.02299EPSS
SaveExploits0References2
CVE
CVE
•added 2018/11/14 1:00 a.m.•75 views

CVE-2018-8600

CVE-2018-8600 is an XSS vulnerability in Microsoft Azure App Services on Azure Stack caused by improper sanitization of user input. Exploitation could allow a remote attacker to execute scripts in the context of the current user when visiting the affected App Service page. Public details in Micro...

6.1CVSS6AI score0.02299EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•5 views

CVE-2018-8600: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App...

6.1CVSS6.6AI score0.02299EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
•added 2018/10/11 5:57 p.m.•58 views

Qualys Broadens Security Offerings for Azure

Qualys is expanding its security and compliance capabilities for Microsoft Azure, by adding protection for the on-premises Azure Stack and extending capabilities for public cloud deployments. By using Qualys’ platform to defend hybrid IT environments, organizations get a unified view of their...

0.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 1976/01/01 12:00 a.m.•4 views

2022-03 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5011566)

2022-03 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems KB5011566...

7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 1976/01/01 12:00 a.m.•11 views

2022-01 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5009625)

2022-01 Cumulative Update Preview for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems KB5009625...

5.3AI score
SaveExploits0
Rows per page
Query Builder