16206 matches found
CVE-2026-23655: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-21522: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-21512: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21228: Improper Certificate Validation
Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network...
CVE-2026-21528: Binding to an Unrestricted IP Address
Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
Microsoft Azure Trust Management Vulnerability
Microsoft Azure is an open enterprise-level cloud computing platform developed by the American company Microsoft. There are vulnerabilities in Trust Management of Microsoft Azure. Attackers can exploit these vulnerabilities to execute code remotely...
CVE-2026-21529: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
Ubuntu: Security Advisory (USN-7988-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-21532
Azure Function Information Disclosure Vulnerability...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24302
Azure Arc Elevation of Privilege Vulnerability...
SUSE CVE-2026-23518
Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not properly validated. Because JWT signatures were not...
openSUSE 16 Security Update : golang-github-prometheus-prometheus (openSUSE-SU-2026:20177-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20177-1 advisory. Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of...
EUVD-2026-5521
Azure Function Information Disclosure Vulnerability...
EUVD-2026-5520
Azure Front Door Elevation of Privilege Vulnerability...
EUVD-2026-5522
Azure Arc Elevation of Privilege Vulnerability...
OPENSUSE-SU-2026:10161-1 python311-azure-core-1.38.0-2.1 on GA media
These are all security issues fixed in the python311-azure-core-1.38.0-2.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu: Security Advisory (USN-8014-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8013-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
