Autor: Peter Leibling

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Devolutions Server ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.

Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.

Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation (‚cross-site scripting‘) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.