PT-2023-2462 · Microsoft · Windows Error Reporting Service +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Service, which can be exploited to elevate privileges. This allows an attacke...

CVE-2023-28221: Exposure of Sensitive Information to an Unauthorized Actor

Windows Error Reporting Service Elevation of Privilege Vulnerability...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM® SDK, Java™ Technology Edition are affected by multiple vulnerabilities (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)

Summary This covers all applicable Java SE CVEs published by Oracle as part of their October 2022 Critical Patch Update. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: Jazz Foundation, IBM Engineering Lifecycle...

CVE-2023-21558

Windows Error Reporting Service Elevation of Privilege Vulnerability...

PT-2023-1259 · Microsoft · Windows Error Reporting Service +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Service, which can be exploited to elevate privileges. This allows an attacke...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

CVE-2023-21558: Improper Input Validation

Windows Error Reporting Service Elevation of Privilege Vulnerability...

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM® SDK, Java™ Technology Edition are affected by multiple vulnerabilities ( CVE-2022-21541, CVE-2022-21540 )

Summary All applicable Java SE CVEs published by Oracle as part of their July 2022 Critical Patch Update. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management, BM Jazz Reporting Service , I...

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service in Windows operating systems is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for IBM Java XML vulnerability CVE-2022-21299

Summary A flaw in the XML component allows attackers to inflict a denial-of-service and/or access external entities which should be inaccessible. Vulnerability is identified in Java versions 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.5 and earlier. Vulnerability Details Refer to the securit...

Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for Java CPU CVE-2021-35561

Summary Java version 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.6 and earlier are affected by a flaw in the java.util component allows an attacker to inflict a denial of service via malicious serialized data which triggers an OutOfMemoryError. Vulnerability Details Refer to the security...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-35795 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

PT-2022-4118

Name of the Vulnerable Software and Affected Versions Windows Error Reporting Service affected versions not specified Description The issue is related to insufficient access restrictions in the Windows Error Reporting service of the Windows operating system. It allows an attacker to elevate their...

CVE-2022-35795: Undefined Security Weakness

Windows Error Reporting Service Elevation of Privilege Vulnerability...

KLA12602 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2022-28800)

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A cross-site scripting vulnerability exists in IBM Jaz...

MetadataExtractor 安全漏洞

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A cross-site scripting vulnerability exists in IBM Jaz...