CVE-2022-2245: Cross-Site Request Forgery (CSRF)

The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...

Uber: Golang expvar Information Disclosure

Package expvar provides a standardized interface to public variables, such as stack trace information and operation counters in servers...

Windows Performance Counters Privilege Escalation

The vulnerability of Windows operating system’s performance counters is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability...

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability...

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability...

Privilege escalation

Performance Counters for Windows Elevation of Privilege Vulnerability...

CVE-2022-22036

Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-22036 Performance Counters for Windows Elevation of Privilege Vulnerability

...

Performance Counters for Windows Elevation of Privilege Vulnerability

...

CVE-2022-22036: Undefined Security Weakness

Performance Counters for Windows Elevation of Privilege Vulnerability...

PT-2022-3715 · Microsoft · Windows Performance Counters +1

Name of the Vulnerable Software and Affected Versions: Windows Performance Counters affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Performance Counters, allowing an attacker to elevate their privileges. This can affect the system,...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Performance Counters with privilege permission and access control issues. The following products and versions are affected:Windows 10 Version...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

PT-2022-7535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the bnx2fc recv frame function in the Linux kernel, which modifies the per cpu lport stats counters in a non-mpsafe way. This can lead to a bug when using...

CVE-2021-41123

Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments...

CVE-2021-41123

Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments...

CVE-2021-41123 Exposure of Sensitive Information to an Unauthorized Actor in WB.UI.Headquarters.dll

Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments...

PT-2021-23106 · Unknown · Survey Solutions

Name of the Vulnerable Software and Affected Versions: Survey Solutions versions prior to 21.09.1 Description: The issue concerns the Headquarters application of Survey Solutions, a survey management and data collection system. In affected versions, the /metrics endpoint is published and availabl...

PT-2021-21734

Name of the Vulnerable Software and Affected Versions Microchip MiWi software versions prior to 6.5 Description The issue concerns the validation of Message Integrity Check MIC bytes in the Microchip MiWi software stack. Specifically, the stack only validates two out of four MIC bytes...