CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability

...

Windows Search Service Elevation of Privilege Vulnerability

...

PT-2023-6945 · Microsoft · Windows Search Service +5

Name of the Vulnerable Software and Affected Versions: Windows Search Service versions prior to the fixed version Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their...

Vulnerability fixed in OTRS

A vulnerability has been fixed in OTRS. The vulnerability allows an authenticated malicious person to perform an SQL injection. execute. OTRS instances are only vulnerable if the TicketSearch Web service is configured. OTRS developers have released updates to fix the vulnerability. More informati...

CVE-2022-20288

In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

Description of the security update for SharePoint Enterprise Server 2016: December 14, 2021 (KB5002055)

None None...

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

None None...

Unauthorized Access Vulnerability in Apache Solr

Apache Solr is an open source search service , using the Java language development , mainly based on HTTP and Apache Lucene implementation . An unauthorized access vulnerability exists in Apache Solr, which can be exploited by attackers to obtain sensitive information...

CVE-2021-21318 Removing access may not effect published series

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...

Description of the security update for SharePoint Enterprise Server 2016: March 10, 2020

None None...

Description of the security update for SharePoint Enterprise Server 2016: May 14, 2019

None None...

The vulnerability of the Windows Search component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Search component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using specially created messages sent to the search service, including those using an...

CVE-2018-16957

The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI search service uses this hardcoded password and cannot be customised by customers. An adversary able to access this service over a network...

CVE-2018-16957

Oracle WebCenter Interaction 10.3.3 search service’s queryd.exe is built with a hardcoded password (i1g2s3c4) used for authentication, and customers cannot customize this credential. A remote attacker could issue search queries over the network to exfiltrate large amounts of sensitive information...

CVE-2018-16957

The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI search service uses this hardcoded password and cannot be customised by customers. An adversary able to access this service over a network...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

Security Bulletin: IBM Tealeaf Customer Experience internal connections not encrypted (CVE-2015-4961)

Summary Internal connections between IBM Tealeaf Customer Experience servers use unencrypted HTTP. Vulnerability Details CVEID: CVE-2015-4961 DESCRIPTION: In an IBM Tealeaf environment with multiple servers, connections to the Tealeaf Data Service, Search Service, Replay Service, and Tracking...

Solaris 10 (sparc) : 142824-29

Indexing and Search Service 1u5-29.15600: core patch. Date this patch was last updated by Sun : Jan/07/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...