1889 matches found
CVE-2023-36003
CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...
CVE-2023-36003 XAML Diagnostics Elevation of Privilege Vulnerability
...
XAML Diagnostics Elevation of Privilege Vulnerability
...
Microsoft XAML Diagnostics Security Vulnerability
Microsoft XAML Diagnostics is a set of tools from Microsoft Corporation USA that help developers analyze and debug the user interface of XAML-based applications. A security vulnerability exists in Microsoft XAML Diagnostics. An attacker could exploit the vulnerability to elevate privileges. The...
PT-2023-7620 · Microsoft · Windows Xaml Diagnostics +1
Name of the Vulnerable Software and Affected Versions: Windows XAML Diagnostics affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the XAML diagnostics tool, which is associated with inadequate access restrictions. This vulnerability ca...
CVE-2023-28896
Access to critical Unified Diagnostics Services UDS of the Modular Infotainment Platform 3 MIB3 infotainment is transmitted via Controller Area Network CAN bus in a form that can be easily decoded by attackers with physical access to the vehicle. Vulnerability discovered on Škoda Superb III 3V3 -...
CVE-2023-28896
Access to critical Unified Diagnostics Services UDS of the Modular Infotainment Platform 3 MIB3 infotainment is transmitted via Controller Area Network CAN bus in a form that can be easily decoded by attackers with physical access to the vehicle. Vulnerability discovered on Škoda Superb III 3V3 -...
PT-2023-22036 · Volkswagen · Modular Infotainment Platform 3
Name of the Vulnerable Software and Affected Versions: Modular Infotainment Platform 3 MIB3 affected versions not specified Description: Access to critical Unified Diagnostics Services UDS of the Modular Infotainment Platform 3 MIB3 infotainment is transmitted via Controller Area Network CAN bus ...
CVE-2023-28802
An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...
CVE-2023-28802
An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...
Input validation
An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...
PT-2023-32575 · Unknown · Syrus4 Iot Gateway
Name of the Vulnerable Software and Affected Versions: Syrus4 IoT Gateway affected versions not specified Description: The Syrus4 IoT gateway has an unsecured MQTT server, allowing a remote unauthenticated attacker to execute arbitrary commands on connected devices. This exposes location, video,...
Zscaler Client Connector Security Vulnerability
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...
CVE-2023-5739
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege...
CVE-2023-5739
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege...
Privilege escalation
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege...
CVE-2023-5739
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege...
CVE-2023-5739
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege...
CVE-2023-5739
HP PC Hardware Diagnostics Windows is associated with CVE-2023-5739, indicating elevation of privilege. Connected HP docs expand the impact to include HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware, citing potential buffer overflow and privilege escala...
PT-2023-32293 · Hewlett Packard · Hp Pc Hardware Diagnostics Windows
Name of the Vulnerable Software and Affected Versions: HP PC Hardware Diagnostics Windows affected versions not specified Description: The issue concerns an elevation of privilege in certain versions of HP PC Hardware Diagnostics Windows. There is no information provided about the estimated numbe...