Lucene search
+L

13521 matches found

CNNVD
CNNVD
added 2025/10/14 12:00 a.m.14 views

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...

7.8CVSS8.8AI score0.00534EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.7 views

PT-2025-42152

Name of the Vulnerable Software and Affected Versions Azure Container Instances ACI affected versions not specified Description An issue exists in Azure Container Instances where external control of file names or paths can allow an authorized attacker to elevate privileges locally. The...

8.2CVSS8.9AI score0.00414EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.10 views

Microsoft Azure Monitor 代码问题漏洞

Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an attacker's ability to elevate privileges by...

7CVSS8.9AI score0.00727EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/10/14 12:00 a.m.15 views

KLA89270 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...

8.2CVSS7.3AI score0.00727EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:00 a.m.7 views

Microsoft Azure Monitor Agent < 1.36.3 Elevation of Privilege (CVE-2025-59285)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.36.3. It is, therefore, affected by a elevation of privilege vulnerability. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessu...

7CVSS8.3AI score0.00727EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.10 views

PT-2025-41994

Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. An attacker with local access can elevate privileges. This could lead to gaining...

7CVSS6.1AI score0.00518EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.9 views

PT-2025-42047

Name of the Vulnerable Software and Affected Versions Azure Local affected versions not specified Description A heap-based buffer overflow exists in Azure Local. An authorized attacker can exploit this to gain elevated privileges on a local system. Recommendations At the moment, there is no...

7.8CVSS9.3AI score0.00329EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.9 views

Microsoft Azure 安全漏洞

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. Microsoft Azure has a security vulnerability that can be exploited by an attacker who can elevate privileges...

7.8CVSS6.8AI score0.00329EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.6 views

PT-2025-42146

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...

7CVSS6.4AI score0.00727EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.5 views

PT-2025-42155

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An improper access control issue exists in Azure Monitor Agent. An authorized attacker can elevate privileges locally. Recommendations At the moment, there is no information about...

7.8CVSS6.4AI score0.00592EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:00 a.m.3 views

Security Updates for Azure Connected Machine Agent < 1.56 (October 2025)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...

7.8CVSS8.3AI score0.00534EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.12 views

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...

7CVSS8.8AI score0.00518EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.12 views

Microsoft Azure Monitor 访问控制错误漏洞

Microsoft Azure Monitor is a new style of observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. An access control error vulnerability exists in Microsoft Azure Monitor, which stems from an attacker's ability to elevate...

7.8CVSS8.8AI score0.00592EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.8 views

Microsoft Azure 安全漏洞

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. Microsoft Azure has a security vulnerability that can be exploited by an attacker who can elevate privileges...

8.2CVSS6.8AI score0.00414EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.10 views

PT-2025-42060

Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. A successful exploit could allow a local attacker to gain elevated privileges...

7.8CVSS6.2AI score0.00534EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.8 views

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. A security vulnerability exists in Microsoft Azure Compute Gallery, which can be exploited by an attacker to elevate privileges...

8.2CVSS9AI score0.00414EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:00 a.m.6 views

Microsoft Azure Monitor Agent < 1.38.1.0 Elevation of Privilege (CVE-2025-59494)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.38.1.0. It is, therefore, affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessus has no...

7.8CVSS8.3AI score0.00592EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/14 12:00 a.m.4 views

Ubuntu: Security Advisory (USN-7819-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.00894EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/14 12:00 a.m.9 views

Ubuntu: Security Advisory (USN-7796-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.00625EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/10 9:27 p.m.10 views

CVE-2025-55321

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...

8.7CVSS6.8AI score0.00413EPSS
SaveExploits0References1
Rows per page
Query Builder