Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability

Improper access control in Azure allows an unauthorized attacker to disclose information over a network...

Azure DevOps Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

Improper Authentication Bypass

github.com/hashicorp/vault is vulnerable to improper authentication bypass. The vulnerability is due to the Azure Auth method not correctly validating claims in Azure-issued tokens, allowing potential bypass of the boundlocations parameter on login...

KLA83527 PE vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-29813 Related products Microsoft-Azure CVE list CVE-2025-29813 critical KB list Solution Install necessary updates from t...

KLA83529 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability i...

PT-2025-20430 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Azure, which allows an authorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

Ubuntu: Security Advisory (USN-7500-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure deployed machines fail to Power On due to Data Collection Rule Associations

When applying a Machine Profile to an Azure-based Machine Creation Services catalog, attempting to Start machines may result in one of the following errors: "code":"UnsupportedFeature","message":"Data Collection Rule Associations is not supported in the location of the targeted parent resource...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure that stems from improper access control and could lead to information disclosure...

Microsoft Azure Automation 授权问题漏洞

Microsoft Azure Automation is a cloud automation service from Microsoft Corporation USA. The product focuses on providing cloud-based automation and configuration services. An authorization issue vulnerability exists in Microsoft Azure Automation that stems from improper authorization and could...

Ubuntu: Security Advisory (USN-7500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Azure 代码问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Azure that stems from server-side request forgery and could lead to spoofing attacks...

BlobTierInadequateForContentLength during Machine Catalog Update

The following error is seen while updating a MCS Machine Catalog after resizing the size of the Master VM disk. Exception: StudioErrorId : ProvisioningTaskError ErrorCategory : NotSpecified TaskState : FailedToCreateImagePreparationVm TaskStateInformation : Terminated ErrorId :...

Ubuntu: Security Advisory (USN-7495-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-20428 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Azure DevOps affected versions not specified Visual Studio affected versions not specified Description: An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully...

PT-2025-20429 · Microsoft · Azure Automation

Name of the Vulnerable Software and Affected Versions: Azure Automation affected versions not specified Description: The issue is related to improper authorization in Azure Automation, allowing an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is n...

PT-2025-20431 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to improper access control in Azure, allowing an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is no information abo...

fence-agents bug fix update

An update is available for fence-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...