7327 matches found
Azure Monitor Agent Elevation of Privilege Vulnerability
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
Azure Monitor Agent Elevation of Privilege Vulnerability
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
KLA89270 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...
Microsoft Azure Monitor 代码问题漏洞
Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an attacker's ability to elevate privileges by...
Microsoft Azure Monitor Agent < 1.36.3 Elevation of Privilege (CVE-2025-59285)
The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.36.3. It is, therefore, affected by a elevation of privilege vulnerability. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessu...
PT-2025-42155
Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An improper access control issue exists in Azure Monitor Agent. An authorized attacker can elevate privileges locally. Recommendations At the moment, there is no information about...
PT-2025-42146
Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...
Microsoft Azure Monitor 访问控制错误漏洞
Microsoft Azure Monitor is a new style of observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. An access control error vulnerability exists in Microsoft Azure Monitor, which stems from an attacker's ability to elevate...
Microsoft Azure Monitor Agent < 1.38.1.0 Elevation of Privilege (CVE-2025-59494)
The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.38.1.0. It is, therefore, affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessus has no...
CVE-2025-55321
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...
EUVD-2025-33550
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...
CVE-2025-55321
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
...
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
...
CVE-2025-55321
CVE-2025-55321 refers to a cross-site scripting vulnerability in Azure Monitor (Azure Monitor Log Analytics) where improper input neutralization during web page generation enables spoofing of the user interface over the network. Affected product family includes Azure Monitor/Log Analytics. The ro...
Azure Monitor Log Analytics Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-48432
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-48432. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-48432 DESCRIPTION: An issue was discovered in Django 5.2 before...
CVE-2025-27060
CVE-2025-27060 describes a memory corruption vulnerability in Qualcomm chipsets TZ firmware related to System Configuration Manager (SCM) calls with malformed inputs. Multiple connected sources corroborate the issue as a memory corruption/untrusted pointer dereference scenario with high impact, i...