Lucene search
+L

16153 matches found

Microsoft Security Update
Microsoft Security Update
•added 2026/04/16 8:00 p.m.•31 views

Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)

Azure File Sync Agent v22.3 Release – April 2026 KB5087090...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2026/04/16 8:00 p.m.•58 views

Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)

Azure File Sync Agent v22.3 Release – April 2026 KB5087090...

5.8AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/04/16 10:27 a.m.•18 views

Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: CVE-2026-33186: Authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header bsc1260307. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS5.8AI score0.01688EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2026/04/16 10:27 a.m.•16 views

SUSE-SU-2026:1395-1 Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: - CVE-2026-33186: Authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header bsc1260307...

9.1CVSS6.5AI score0.01688EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•22 views

Azure Monitor Agents Deserialization

The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to enhance their privileges...

7.8CVSS6.5AI score0.02513EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•23 views

Azure Logic Apps Privilege Escalation

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain elevat...

9CVSS6.7AI score0.00778EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•24 views

Azure Monitor Agents Privilege Escalation

The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to increase their privileges...

7.8CVSS6.6AI score0.00333EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2026/04/16 12:00 a.m.•39 views

Ubuntu: Security Advisory (USN-8145-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.0038EPSS
SaveExploits0References2
osv_usn
osv_usn
•added 2026/04/15 8:25 p.m.•27 views

USN-8145-5 linux-azure, linux-azure-4.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...

8.8CVSS6.6AI score0.0038EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•14 views

CVE-2026-32192

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.02513EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•15 views

CVE-2026-32168

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•15 views

CVE-2026-32171

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2026/04/15 3:31 p.m.•24 views

GHSA-4G48-54Q2-FG7Q Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/04/15 3:31 p.m.•22 views

Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/04/15 3:31 p.m.•27 views

EUVD-2026-22921

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References4
NVD
NVD
•added 2026/04/15 1:16 p.m.•20 views

CVE-2026-25219

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

6.5CVSS0.00552EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/15 12:30 p.m.•50 views

CVE-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

0.00552EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/15 12:30 p.m.•21 views

CVE-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

5.9AI score0.00552EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/15 12:30 p.m.•29 views

CVE-2026-25219

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

5.9AI score0.00552EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/15 12:30 p.m.•82 views

CVE-2026-25219

Apache Airflow is vulnerable because the access_key and connection_string properties were not marked as sensitive names in the secrets masker. This allows users with read permissions to view these values in the Connection UI . Additionally, if a Connection is accidentally logged, these sensitive ...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder