13691 matches found
Azure Linux 3.0 Security Update: mdadm (CVE-2023-28736)
The version of mdadm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-28736 advisory. - Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 May allow a privileged user to...
The vulnerability of the Microsoft Azure AI Face Service, a cloud-based facial recognition and analysis service using artificial intelligence technologies, relates to the ability to bypass authentication through spoofing. This allows attackers to elevate their privileges.
The vulnerability of the Microsoft Azure AI Face Service, a cloud-based facial recognition and analysis service using artificial intelligence technologies, relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability can allow unauthorized actors to gain increas...
Azure Linux 3.0 Security Update: docker-buildx / docker-compose / moby-compose / moby-engine (CVE-2024-23650)
The version of docker-buildx / docker-compose / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23650 advisory. - BuildKit is a toolkit for converting source code to bui...
Azure Linux 3.0 Security Update: rabbitmq-server (CVE-2023-50966)
The version of rabbitmq-server installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50966 advisory. - erlang-jose aka JOSE for Erlang and Elixir through 1.11.6 allow attackers to cause a denial of...
Azure Linux 3.0 Security Update: telegraf (CVE-2023-50658)
The version of telegraf installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50658 advisory. - The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption vi...
Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)
The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...
Azure Linux 3.0 Security Update: nodejs / nodejs18 (CVE-2024-21892)
The version of nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21892 advisory. - On Linux, Node.js ignores certain environment variables if those May have been set by an...
Azure Linux 3.0 Security Update: python3 (CVE-2023-27043)
The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27043 advisory. - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special...
Azure Linux 3.0 Security Update: postgresql (CVE-2024-4317)
The version of postgresql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4317 advisory. - Missing authorization in PostgreSQL built-in views pgstatsext and pgstatsextexprs allows an unprivileged...
CVE-2025-21188
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...
CVE-2025-0426 vulnerabilities
Vulnerabilities for packages: emissary, nodetaint, kubernetes-csi-driver-nfs, aws-efs-csi-driver, kubernetes-dns-node-cache, kapp, vcluster, spark-operator, yunikorn-k8shim, rancher-fleet, argo-rollouts, rancher-webhook, kubernetes, local-static-provisioner, ip-masq-agent, argocd-image-updater,...
CVE-2025-0426 vulnerabilities
Vulnerabilities for packages: argo-cd-fips, kubernetes, argo-rollouts, cluster-autoscaler-fips, kapp, rancher-fleet, argo-cd, aws-efs-csi-driver-fips, azuredisk-csi-fips, calico-fips, kubernetes-dns-node-cache-fips, azuredisk-csi, rancher-webhook, nodetaint, calico, cluster-autoscaler,...
Ubuntu: Security Advisory (USN-7236-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
February Microsoft Patch Tuesday
February Microsoft Patch Tuesday. 89 CVEs, 33 added since January. Two with signs of exploitation in the wild: EoP - Windows Ancillary Function Driver for WinSock CVE-2025-21418 EoP - Windows Storage CVE-2025-21391 There are no vulnerabilities with public exploits, but there are 7 with private...
USN-7236-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; - VMware vSockets driver; CVE-2024-53164, CVE-2024-53103, CVE-2024-53141...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in Azure Network Watcher and the HPC Linux Node Agent. A malicious person could grant themselves elevated privileges by exploiting the vulnerability with attribute CVE-2025-21188 in the Network Watcher, or to execute arbitrary code by exploiting the vulnerabili...
CVE-2025-21188
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...
CVE-2025-21188
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...
2025-02 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5052106)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
