274 matches found
CVE-2023-49921
A flaw was found in Elasticsearch. Watcher search input is logged in the search query results when using the DEBUG log level, which could lead to excessive logging of unnecessary and unauthorized content. Mitigation No mitigation is available for this flaw. Please update if and when a patch is...
Elasticsearch 8.11.2, 7.17.16 Security Update (ESA-2023-29)
Elasticsearch Insertion of Sensitive Information into Log File ESA-2023-29 An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has...
CVE-2023-36737
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2023-36737
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
Privilege escalation
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2023-36737
Technical details for CVE-2023-36737 are not publicly provided in the connected documents. The sources reference patches but do not disclose affected components, versions, or exploitation specifics. Monitor for updates.
CVE-2023-36737 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
KLA61357 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Identity SDK can be exploited remotely to execute...
Multiple vulnerabilities in Panasonic KW Watcher
Overview KW Watcher provided by Panasonic contains multiple vulnerabilities listed below. Improper restriction of operations within the bounds of a memory buffer CWE-119 - CVE-2023-3471 Use after free CWE-416 - CVE-2023-3472 Michael Heinzl reported these vulnerabilities to Panasonic and...
CVE-2023-3471
Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
CVE-2023-3472
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
CVE-2023-3471
Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
Design/Logic Flaw
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
Buffer overflow
Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
CVE-2023-3472
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
CVE-2023-3472
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
CVE-2023-3472
Panasonic KW Watcher software contains a use-after-free vulnerability (CVE-2023-3472) affecting versions 1.00 through 2.82. The issue may allow an attacker to execute arbitrary code when a crafted configuration file is processed. Public sources consistently describe impact as arbitrary code execu...