CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

Windows Admin Center in Azure Portal Information Disclosure Vulnerability

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

PT-2025-15591 · Microsoft · Azure Portal Windows Admin Center

Name of the Vulnerable Software and Affected Versions: Azure Portal Windows Admin Center affected versions not specified Description: The issue allows an unauthorized attacker to disclose information locally due to external control of file name or path in Azure Portal Windows Admin Center...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected: Windows...

CVE-2024-42012

The CVE relates to GRAU DATA Blocky before 3.1, a ransomware-protection product. The issue is that passwords are stored encrypted rather than hashed, and at login the entered password is compared to the decrypted cleartext password. An attacker with Windows admin or debugging rights can exfiltrat...

CVE-2024-43475

CVE-2024-43475 is a Microsoft Windows Admin Center information-disclosure vulnerability. Connected sources describe a memory-corruption issue (buffer overflow) affecting Windows Admin Center-related functionality that can lead to sensitive data disclosure. CVSS details from the initial document i...

EUVD-2024-40742

Microsoft Windows Admin Center Information Disclosure Vulnerability...

Microsoft Windows Admin Center Information Disclosure Vulnerability

...

PT-2024-6306 · Microsoft · Windows Admin Center +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Admin Center affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information or cause a denial of service. There is no information abou...

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center. An attacker could exploit the vulnerability to obtain sensitiv...

Dell OpenManage Integration with Microsoft Windows Admin Center Security Vulnerability

Dell OpenManage Integration with Microsoft Windows Admin Center is an extension for Windows Admin Center from Dell USA. A security vulnerability exists in Dell OpenManage Integration with Microsoft Windows Admin Center 3.1 and prior versions, which stems from a remote code execution vulnerability...

CVE-2023-38558

A vulnerability has been identified in SIMATIC PCS neo Administration Console V4.0 All versions, SIMATIC PCS neo Administration Console V4.0 Update 1 All versions. The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC PCS neo Administration Console V4.0 All versions, SIMATIC PCS neo Administration Console V4.0 Update 1 All versions. The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the...

CVE-2023-38558

A vulnerability has been identified in SIMATIC PCS neo Administration Console V4.0 All versions, SIMATIC PCS neo Administration Console V4.0 Update 1 All versions. The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the...

CVE-2023-38558

A vulnerability has been identified in SIMATIC PCS neo Administration Console V4.0 All versions, SIMATIC PCS neo Administration Console V4.0 Update 1 All versions. The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the...

CVE-2023-38558

Summary of CVE-2023-38558 : Siemens SIMATIC PCS neo Administration Console (V4.0 and V4.0 Update 1) contains an information-disclosure vulnerability that leaks Windows admin credentials to an attacker with local access, enabling impersonation of an admin and potential access to other Windows syst...