CVE-2023-21753

Event Tracing for Windows Information Disclosure Vulnerability...

CVE-2023-21753

Event Tracing for Windows Information Disclosure Vulnerability...

CVE-2023-21536

Event Tracing for Windows Information Disclosure Vulnerability...

Information disclosure

Event Tracing for Windows Information Disclosure Vulnerability...

Event Tracing for Windows Information Disclosure Vulnerability

...

PT-2023-1129 · Microsoft · Event Tracing For Windows +1

Name of the Vulnerable Software and Affected Versions: Event Tracing for Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Event Tracing service for Microsoft Windows operating systems. This can allow an attacke...

CVE-2023-21536 Event Tracing for Windows Information Disclosure Vulnerability

...

CVE-2023-21753 Event Tracing for Windows Information Disclosure Vulnerability

...

CVE-2023-21536: Out-of-bounds Read

Event Tracing for Windows Information Disclosure Vulnerability...

CVE-2023-21753: Use of Uninitialized Resource

Event Tracing for Windows Information Disclosure Vulnerability...

PT-2023-1162 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...

CVE-2023-21536

CVE-2023-21536 is described in the provided documents as a Windows Event Tracing vulnerability with the impact of access to sensitive data (CVSSv3.1 base score 4.7). The connected sources associate this CVE with Windows Event Tracing and list it among other Windows vulnerabilities, but they do no...

CVE-2023-21753

CVE-2023-21753 is a Windows Event Tracing for Windows (ETW) information disclosure vulnerability. It is a local-attack, low-privilege issue with confidentiality impact, enabling information leakage without affecting integrity or availability. Public exploits are reported in OpenVAS; remediation i...

CVE-2022-3929

Communication between the client and the server application of the affected products is partially done using CORBA Common Object Request Broker Architecture over TCP/IP. This protocol is not encrypted and allows tracing of internal messages. This issue affects FOXMAN-UN product: FOXMAN-UN R15B,...

CVE-2022-3929: Cleartext Transmission of Sensitive Information

Communication between the client and the server application of the affected products is partially done using CORBA Common Object Request Broker Architecture over TCP/IP. This protocol is not encrypted and allows tracing of internal messages. This issue affects FOXMAN-UN product: FOXMAN-UN R15B,...

PT-2025-49750

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc6-next-20230202 4 Description The Linux kernel contains an issue where the arch cpu idle function was not properly marked as 'noinstr', leading to a warning during tracing operations on the s390...

CVE-2022-45411

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...

CVE-2022-45411

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...

DEBIAN-CVE-2022-45411

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...

Cross site scripting

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...