8718 matches found
PT-2025-42947
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description An easily exploitable issue exists in the Performance Monitor component of Oracle PeopleSoft Enterprise PeopleTools. An unauthenticated attacker with network access via HTTP can cause a...
PT-2025-42883
Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 176800 and below Description ManageEngine Applications Manager versions 176800 and below have a flaw that can lead to information disclosure in the File/Directory monitor functionality. Recommendation...
CVE-2025-53050: Uncontrolled Resource Consumption
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Performance Monitor. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2025-6239: Exposure of Sensitive Information to an Unauthorized Actor
Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor...
VHS Elektronik ACE Center 安全漏洞
VHS Elektronik ACE Center is a web-based energy monitoring platform from VHS Elektronik, Turkey. A security vulnerability exists in VHS Elektronik ACE Center versions 3.10.100.1768 through 3.10.161.2255 prior to version 3.10.161.2255, which originates from a user control key leading to an...
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, relates to access control errors. This allows attackers to escalate their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which are used on virtual machines and physical servers, is related to access control errors. Exploiting this vulnerability could allow attackers to increase their privileges...
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, stems from deficiencies in the deserialization mechanism. This allows attackers to exploit their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which are used on virtual machines and physical servers, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to increase their privileges...
CVE-2025-59285
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59494
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
The vulnerability of the VMM component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the VMM component in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2025-34269
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34357
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59494
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59494
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59285
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59285
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59285 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59285 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59285
Azure Monitor Agent (Microsoft) is affected by CVE-2025-59285: deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. The issue targets the Azure Monitor Agent component and is documented across multiple sources, including MSRC updates and NVD entries. T...