13698 matches found
@artusx/init (>=1.2.0-beta.1, <=1.2.1), @artusx/rush-utils (>=0.0.1, <=0.0.11) +20 more potentially affected by CVE-2024-35255 via @azure/identity (>=4.0.0, <=4.2.0)
@azure/identity NPM version =4.0.0, =1.2.0-beta.1, =0.0.1, =1.0.0-alpha.20231026.4, =1.0.1-alpha.20231026.4, =2.0.1, =1.19.0-beta.0, =5.112.0, =5.112.0, =0.9.11, =1.0.0, =1.0.1 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...
@adinsure-ops/ops-cli (5.3.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)
@azure/msal-node NPM version =2.7.0, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
Azure Storage Movement Client Library Denial of Service Vulnerability
Azure Storage Movement Client Library Denial of Service Vulnerability...
GHSA-32F8-HMR3-7VXG Azure Storage Movement Client Library Denial of Service Vulnerability
Azure Storage Movement Client Library Denial of Service Vulnerability...
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Overview Affected versions of this package are vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in the authentication process. An attacker can elevate privileges by exploiting race conditions during the token validation steps. This is only...
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Overview Affected versions of this package are vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in the authentication process. An attacker can elevate privileges by exploiting race conditions during the token validation steps. This is only...
Microsoft and Adobe Patch Tuesday, June 2024 Security Update Review
Microsofts June Patch Tuesday is here, bringing fixes for vulnerabilities impacting its multiple products. This months release highlights the ongoing battle against cybersecurity threats, from critical updates to important fixes. Lets dive into the crucial insights from Microsofts Patch Tuesday...
Only one critical issue disclosed as part of Microsoft Patch Tuesday
Microsoft released its monthly security update Tuesday, disclosing 49 vulnerabilities across its suite of products and software. Of those there is only one critical vulnerability. Every other security issues disclosed this month is considered "important." The lone critical security issue is...
CVE-2024-37325
Azure Science Virtual Machine DSVM Elevation of Privilege Vulnerability...
CVE-2024-37325
Azure Science Virtual Machine DSVM Elevation of Privilege Vulnerability...
CVE-2024-35254
Azure Monitor Agent Elevation of Privilege Vulnerability...
AZL-42637 CVE-2024-35255 affecting package keda for versions less than 2.14.1-1
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
AZL-42799 CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: velero, zarf, argo-events, kubescape, step-ca, chezmoi, hugo-extended, rekor, trivy, rclone, ksops, opentelemetry-collector-contrib, flux-kustomize-controller, buildkitd, tkn, bank-vaults, hugo, zot, pulumi, grafana-mimir, cosign, sops, tekton-chains, rook,...
CVE-2024-35254
Azure Monitor Agent Elevation of Privilege Vulnerability...
CVE-2024-35255
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
AZL-42649 CVE-2024-35255 affecting package telegraf for versions less than 1.31.0-9
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
