Lucene search
+L

13695 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/26 12:00 a.m.13 views

The vulnerability of the software development package Azure IoT SDK for C lies in its memory management after memory is released. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Azure IoT SDK for C development software package lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS5.8AI score0.00427EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:00 a.m.11 views

The vulnerability of the Azure Health Bot, a tool for creating and deploying intelligent chatbots in the healthcare sector, lies in the insufficient verification of incoming requests. This allows attackers to increase their privileges.

The vulnerability of the tool for creating and deploying intelligent chatbots in the healthcare domain, Azure Health Bot, is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9.4CVSS5.9AI score0.01833EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:00 a.m.9 views

The vulnerability of the integrated Azure Stack Hub hybrid cloud computing system, related to the lack of security measures for the web page structure, allows attackers to perform spoofing attacks.

The vulnerability of the integrated Azure Stack Hub hybrid computing system is related to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...

9.4CVSS5.4AI score0.01207EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:00 a.m.9 views

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to lack of access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

7.8CVSS5.5AI score0.00514EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2024/08/26 12:00 a.m.21 views

Ubuntu: Security Advisory (USN-6973-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.7AI score0.00805EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/08/26 12:00 a.m.32 views

Ubuntu: Security Advisory (USN-6972-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.01177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/26 12:00 a.m.10 views

PT-2024-31254 · Unknown · Picuploader

Name of the Vulnerable Software and Affected Versions: PicUploader version fcf82ea Description: A cross-site scripting XSS issue exists in the /auth/AzureRedirect.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error description...

8CVSS6.1AI score0.00399EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:00 a.m.10 views

The vulnerability in the set of tools and libraries for developing Azure IoT Hub Device Client SDK, related to a memory reclamation error, allows a perpetrator to execute arbitrary code.

The vulnerability of the tools and libraries used for developing Azure IoT Hub Device Client SDK is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS5.8AI score0.0048EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/23 10:55 p.m.10 views

Malicious code in azure-projects (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aa8974ecfad0d7fc824d50482bd3fb2954373e3b2227d1adc2220bc309c258f1 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2024/08/23 10:55 p.m.8 views

MAL-2024-12211 Malicious code in azure-projects (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aa8974ecfad0d7fc824d50482bd3fb2954373e3b2227d1adc2220bc309c258f1 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

7.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2024/08/23 3:29 p.m.61 views

USN-6972-3: Linux kernel (Azure) vulnerabilities

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service system crash. CVE-2024-22099 It was discovered that a race condition existed in th...

8.8CVSS6.6AI score0.01177EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2024/08/23 3:26 p.m.53 views

USN-6973-2: Linux kernel (Azure) vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service system crash. CVE-2024-24860 Several security issues were discovere...

8.4CVSS6.6AI score0.00805EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/08/23 12:00 a.m.51 views

Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6973-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6973-2 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A...

8.4CVSS7AI score0.00805EPSS
SaveExploits1References9
Citrix
Citrix
added 2024/08/23 12:00 a.m.12 views

Citrix DAAS: After creating machine Catalog, VDAs gets deleted after Turning them ON in Azure

After creating Machine Catalog and Delivery Group, VDAs would get deleted after turning them ON in Azure. These happens to Windows 11 Single and Multi session VDAs Error: FailureMessage: Error starting machine. At least one resource deployment operation failed...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/08/23 12:00 a.m.76 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6972-3)

"The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6972-3 advisory. Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL...

8.8CVSS6.8AI score0.01177EPSS
SaveExploits0References19
OpenVAS
OpenVAS
added 2024/08/22 12:00 a.m.40 views

Ubuntu: Security Advisory (USN-6973-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.7AI score0.00805EPSS
SaveExploits1References2
Kaspersky
Kaspersky
added 2024/08/22 12:00 a.m.24 views

KLA71828 PE vulnerability in Microsoft Azure

Elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43477 CVE list CVE-2024-43477 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...

7.5CVSS6.9AI score0.01043EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2024/08/21 9:08 p.m.46 views

USN-6975-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-Mode Linux UML; - MMC subsystem; CVE-2024-39292, CVE-2024-39484...

7.8CVSS7AI score0.00241EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2024/08/21 4:15 p.m.76 views

Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data

Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft's Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 CVSS score: 8.5, the vulnerability has been described as an information disclosure bug stemming from a...

9.1CVSS6.7AI score0.12341EPSS
SaveExploits0
OSV
OSV
added 2024/08/21 4:03 p.m.10 views

GO-2022-1181 AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity

AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity...

5.3CVSS5.1AI score0.00709EPSS
SaveExploits0References4
Rows per page
Query Builder