140 matches found
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: atlantis, crossplane-provider-aws, kubewatch, bank-vaults, nfs-subdir-external-provisioner, gobuster, grpc-health-probe, wireguard-go, metrics-server, tkn, kubescape, crossplane-provider-azure-authorization, gh, dgraph, kubeflow-katib, ko, secrets-store-csi-driver,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, bank-vaults, aws-nuke, addon-resizer, cluster-autoscaler, nfs-subdir-external-provisioner, nri-prometheus, octo-sts, pulumi-kubernetes-operator,...
GO-2026-6061 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, cluster-api-provider-vsphere, crossplane-provider-aws-cloudformation, rancher-agent, gcsfuse, metrics-server, tigera-operator, external-secrets-operator, kubernetes-csi-livenessprobe, nvidia-container-toolkit, kube-arangodb,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: atlantis, nfpm, rootlesskit, pulumi-kubernetes-operator, crossplane-provider-aws-cloudformation, external-secrets-operator, tkn, crossplane-provider-aws-memorydb, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, kubescape,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: addon-resizer, gobuster, crossplane-provider-aws-cloudformation, kind, gcsfuse, metrics-server, wazero, kpt, kubernetes-csi-livenessprobe, nvidia-container-toolkit, newrelic-fluent-bit-output, crossplane-provider-aws-rds, http-echo, kubescape, mc, kubeflow-katib, ko,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: zot, bank-vaults, rekor, sops, argo-events, rabbitmq-messaging-topology-operator, crossplane-provider-azure-sql, scorecard, spire-server, k3s, pulumi-kubernetes-operator, tekton-chains, zarf, crossplane-provider-family-azure, gitsign, grafana-mimir, skopeo, falcoctl,...
GO-2024-2687 vulnerabilities
Vulnerabilities for packages: addon-resizer, gobuster, crossplane-provider-aws-cloudformation, kind, gcsfuse, metrics-server, wazero, kpt, kubernetes-csi-livenessprobe, newrelic-fluent-bit-output, crossplane-provider-aws-rds, http-echo, kubescape, mc, kubeflow-katib, ko, step, ollama,...
CVE-2026-57104
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-57104
CVE-2026-57104 concerns Azure Storage Explorer, where improper neutralization of input during web page generation enables a cross-site scripting (XSS) vulnerability that can lead to elevation of privilege over a network. According to the CVSS 3.1 data, the issue has a base score of 8.8 (HIGH) wit...
EUVD-2026-56590
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-57104
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
Azure Storage Explorer Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
PT-2026-70394
Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. CVE-2026-56852:...
SUSE-SU-2026:3528-1 Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. - CVE-2026-56852:...
azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)
azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...