13391 matches found
CVE-2026-2628 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators...
EUVD-2026-9274
The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators...
CVE-2026-2628
The CVE-2026-2628 concerns the All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress. Affected: all versions up to and including 2.2.5. Nature: authentication bypass, enabling unauthenticated users to log in as other users (including administrators). Impact: high (CVE metr...
PT-2026-22830
Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.3.15.0 and earlier Description An authentication bypass exists in the Microsoft Entra ID Azure AD authentication mode. An unauthenticated user can authenticate as an arbitrary Entra ID user by using a forged JS...
This Week in Spring - March 3rd, 2026
Hi Spring fans! Welcome to another rip-roaring installment of This Week in Spring! I'm writing this in an Uber en route to the airport to get to awsome Atlanta, GA, for Devnexus 2026! Who's goin'? You goin'? We - the Spring team - will be there in force! Come say hi at the boothes or come see our...
WordPress plugin All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
Security update for python-azure-core (important)
openSUSE security update: security update for python-azure-core ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20292-1 Rating: important References: bsc1257703 Cross-References: CVE-2026-21226 CVSS scores: CVE-2026-21226 SUSE : 7.5...
devops-security-pipeline-poc
DevOps Security Pipeline POC A security-integrated CI/CD pipe...
SUSE-SU-2026:20621-1 Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...
SUSE-SU-2026:20617-1 Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...
OPENSUSE-SU-2026:20292-1 Security update for python-azure-core
This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: apm-server-fips, volsync-fips, k8sgateway-fips, cloud-provider-azure-fips, temporal-server, kubevela, google-guest-agent, juicefs, sops-fips, trivy-fips, kubescape-operator-fips, kyverno-policy-reporter-plugins-kyverno-fips, cluster-api-azure-controller-fips,...
Security Bulletin: IBM IBM Edge Data Collector uses azure_core-1.14.0-py2.py3-none-any.whl which is vulnerable to CVE-2026-21226.
Summary IBM IBM Edge Data Collector uses azurecore-1.14.0-py2.py3-none-any.whl which is vulnerable to CVE-2026-21226. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-21226 DESCRIPTION: Deserialization of untrusted data in Azure Core shared...
USN-8029-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
Ubuntu: Security Advisory (USN-7990-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-27171)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-27171 advisory. - zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because...
Malicious code in azure-postgresql-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bed0aaccd7198eac8f4076c1eec5f143ae28bdcfa8bbf990a62ff7c65411707 The package azure-postgresql-auth was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-975 Malicious code in azure-postgresql-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bed0aaccd7198eac8f4076c1eec5f143ae28bdcfa8bbf990a62ff7c65411707 The package azure-postgresql-auth was found to contain malicious code. Source: ossf-package-analysis...
