CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-35261

CVE-2024-35261 affects Microsoft Azure Network Watcher VM Extension. Public sources indicate the Windows VM Extension is vulnerable when installed below version 1.4.3422.1, with a local elevation-of-privilege flaw that could grant high-impact access (confidentiality, integrity, and availability) ...

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

Microsoft Azure Security Vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure Network Watcher. An attacker can elevate privileges by exploiting the vulnerability...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

Panasonic KW Watcher vulnerable to memory buffer error

Overview KW Watcher provided by Panasonic contains a vulnerability due to improper restriction of operations within the bounds of a memory buffer CWE-119, CVE-2024-4162. Michael Heinzl reported this vulnerability to Panasonic and coordinated. After the coordination was completed, Panasonic report...

CVE-2024-4162

A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory...

CVE-2024-4162

CVE-2024-4162 affects Panasonic KW Watcher (versions 1.00–2.83). The root cause is a memory buffer bounds handling error (CWE-119) that may allow a local attacker to read memory. The vulnerability is documented with a CVSSv3.1 base score of 4.4 (Medium) with local attack vector, low impact on con...

CVE-2024-4162 KW Watcher Vulnerability ALlows Malicious Read Access to Memory

A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory...

CVE-2024-4162 KW Watcher Vulnerability ALlows Malicious Read Access to Memory

A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory...

PT-2024-29467 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.83 Description: A buffer error may allow attackers malicious read access to memory. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.83, consider updating to a version that fixes t...

Panasonic KW Watcher 安全漏洞

Panasonic KW Watcher is an application software from Panasonic Corporation Japan. It allows you to monitor the log files downloaded from the network data logger from your PC. A security vulnerability exists in Panasonic KW Watcher versions 1.00 through 2.83, which originated from a vulnerability...

BIT-ZOOKEEPER-2024-23944 Apache ZooKeeper: Information disclosure in persistent watcher handling

Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher addWatch command to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when th...

Sensitive Information Disclosure

Apache ZooKeeper is vulnerable to Sensitive Information Disclosure. The vulnerability is due to missing ACL checks in the persistent watcher feature. An attackers can monitor child znodes by attaching a persistent watcher to a parent node they already have access to. When the persistent watcher i...

CVE-2024-23944 Apache ZooKeeper: Information disclosure in persistent watcher handling

Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher addWatch command to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when th...

CVE-2024-23944 Apache ZooKeeper: Information disclosure in persistent watcher handling

Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher addWatch command to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when th...

PT-2023-31410 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.17.16 Elasticsearch versions prior to 8.11.2 Description: An issue was discovered whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents...