13365 matches found
CVE-2026-55412
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...
CVE-2026-55412 ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...
CVE-2026-55412
ToolJet (open-source platform) Vulnerability: SSRF in the RestAPI data source component allows authenticated users to induce server-side HTTP requests that bypass its private IP filter via DNS trickery (169.254.169.254.nip.io), potentially stealing Azure managed identity tokens for the AKS produc...
CVE-2026-55412
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...
EUVD-2026-39469
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...
CVE-2026-55412 ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...
CVE-2026-48109 vulnerabilities
Vulnerabilities for packages: azure-functions-extension-bundles...
GHSA-HV8M-JJ95-WG3X vulnerabilities
Vulnerabilities for packages: azure-functions-extension-bundles...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, velero-plugin-for-gcp, step-ca, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, ops-agent, crossplane-provider-aws-cloudfront, eksctl, trivy-operator-fips, kube-mgmt, amazon-cloudwatch-agent, dapr-fips,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, velero-plugin-for-gcp, step-ca, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, ops-agent, crossplane-provider-aws-cloudfront, eksctl, trivy-operator-fips, kube-mgmt, amazon-cloudwatch-agent, dapr-fips,...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)
Azure File Sync Agent v22.4 Release – June 2026 KB5104852...
CVE-2026-56425
The Azure Active Directory AAD authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees provided by the protocol. The application used the PHP session identifier sessionid as the OAuth state...
CVE-2026-56425 MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
The Azure Active Directory AAD authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees provided by the protocol. The application used the PHP session identifier sessionid as the OAuth state...
CVE-2026-56425
CVE-2026-56425 affects the AAD authentication plugin for MISP (OAuth 2.0). The vulnerability stems from using session_id() as the OAuth state parameter, lack of session rotation after login, no dedicated nonce for the state, and not enforcing HTTPS for the redirect URI. Additional issue: OAuth er...
CVE-2026-56425 MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
The Azure Active Directory AAD authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees provided by the protocol. The application used the PHP session identifier sessionid as the OAuth state...
Microsoft Azure Synapse permission licensing and access control issue vulnerabilities
Microsoft Azure Synapse is a cloud data analysis service provided by the American company Microsoft. There are vulnerabilities related to permission licensing and access control in Microsoft Azure Synapse. These vulnerabilities stem from issues with privilege escalation; attackers can exploit the...
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:2466-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2466-1 advisory. This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect result...