Lucene search
K

522 matches found

Kaspersky
Kaspersky
added 2026/03/19 12:0 a.m.6 views

KLA90946 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Cloud Shell can be exploited remotely to gai...

10CVSS5.8AI score0.00803EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/19 12:0 a.m.2 views

PT-2026-26350

Azure DevOps: msazure Elevation of Privilege Vulnerability CVE: CVE-2026-23658 PT-Identifier: PT-2026-26350 Vendor: Microsoft Product: Azure DevOps: msazure CVSS: 8.6 Credits: n/a Description: Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileg...

8.6CVSS5.8AI score0.00781EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/02/13 12:0 a.m.3 views

Security Updates for Azure DevOps 2022 XSS (February 2026)

The Microsoft Team Foundation Server is missing a security update. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2026-21512 Note that Nessus has not...

6.5CVSS5.5AI score0.00961EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/11 7:45 p.m.2 views

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS5.5AI score0.00961EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 6:16 p.m.3 views

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.00961EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 6:16 p.m.3 views

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS0.00961EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 5:51 p.m.27 views

CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability

...

6.5CVSS0.00961EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 5:51 p.m.3 views

CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability

...

6.5CVSS5.4AI score0.00961EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 5:51 p.m.18 views

CVE-2026-21512

CVE-2026-21512 describes a server-side request forgery vulnerability in Azure DevOps Server . The connected documents consistently state an SSRF issue that enables an authorized attacker to perform spoofing over a network , effectively allowing impersonation of another user within affected compon...

6.5CVSS5.5AI score0.00961EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.6 views

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS5.5AI score0.00961EPSS
Exploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:0 p.m.6 views

Azure DevOps Server Cross-Site Scripting Vulnerability

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS5.5AI score0.00961EPSS
Exploits0
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

Microsoft Azure DevOps Server 代码问题漏洞

Microsoft Azure DevOps Server is a software development collaboration tool provided by the American company Microsoft. This product includes features such as shared code, work tracking, and software release management. There are code-related vulnerabilities in Microsoft Azure DevOps Server...

6.5CVSS5.8AI score0.00961EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.4 views

PT-2026-7398

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

6.5CVSS5.5AI score0.00961EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.4 views

CVE-2023-25722

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to...

5.5CVSS6.7AI score0.00206EPSS
Exploits0References1
OSV
OSV
added 2025/10/23 4:25 p.m.5 views

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

7.5CVSS7.1AI score0.00536EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-1723

Malware in sbrugna...

6.5CVSS6.5AI score0.0157EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-1619

Malware in sbrugna...

6.1CVSS6.3AI score0.02419EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-1623

Malware in sbrugna...

6.1CVSS6.3AI score0.01983EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-1624

Malware in sbrugna...

7.5CVSS7.5AI score0.03023EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-9089

Malware in sbrugna...

6.4CVSS6.4AI score0.01112EPSS
Exploits0References2
Rows per page
Query Builder