13712 matches found
Microsoft Azure Kubernetes Security Breach
Microsoft Azure Kubernetes is a fully managed Kubernetes service from Microsoft Corporation USA. Offers serverless Kubernetes, a consolidated Continuous Integration and Continuous Delivery CI/CD experience, along with enterprise-grade security and governance. Unify development and operations team...
PT-2024-1885 · Microsoft · Azure File Sync
Name of the Vulnerable Software and Affected Versions: Microsoft Azure File Sync affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Azure File Sync service, which can be exploited to bypass existing security limitations and eleva...
PT-2024-1812 · Microsoft · Azure Kubernetes Service
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service Confidential Container affected versions not specified Description: The issue is related to insufficient access controls in the deployment and management of confidential containers in Microsoft Azure...
PT-2024-1882 · Microsoft · Azure Active Directory B2C
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Active Directory B2C affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Azure Active Directory B2C, which can lead to spoofing...
Microsoft Azure Connected Machine Agent Security Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Connected Machine Agent. No information about this vulnerability is available at this time, so stay tuned to CNNVD...
Microsoft Azure Kubernetes Security Breach
Microsoft Azure Kubernetes is a fully managed Kubernetes service from Microsoft Corporation USA. Offers serverless Kubernetes, a consolidated Continuous Integration and Continuous Delivery CI/CD experience, along with enterprise-grade security and governance. Unify development and operations team...
Microsoft Azure Site Recovery Security Vulnerability
Microsoft Azure Site Recovery is a type of Site Recovery DRaaS from Microsoft, USA. It is used for cloud and hybrid cloud architectures. A security vulnerability exists in Microsoft Azure Site Recovery. No information about this vulnerability is available at this time, so please stay tuned to CNN...
PT-2024-1669 · Microsoft · Azure Stack Hub
Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the integrated system of hybrid cloud computing. Exploitation of this issue may allow a...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Remote code execution Administrator/Root rights Remote code execution User rights Spoofing Increased use...
Microsoft Azure Active Directory Security Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Active Directory. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...
Security Updates for Azure Connected Machine Agent (February 2024)
The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.38. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...
Security Updates for Microsoft Azure Site Recovery (February 2024)
The Microsoft Azure Site Recovery installation on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
KB5034770: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (February 2024)
The remote Windows host is missing security update 5034770 or Azure HotPatch 5034860. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359,...
PT-2024-1823 · Microsoft · Azure Connected Machine Agent
Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to a symbolic link tracking vulnerability in the Azure Connected Machine Agent. Exploitation of this issue may allow an attacker to elevate their...
Microsoft Azure Stack Security Vulnerability
Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A security vulnerability exists in Microsoft Azure Stack. No information about this vulnerability is available...
Microsoft Azure Active Directory Security Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Active Directory. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...
PT-2024-1884 · Microsoft · Azure Site Recovery
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Microsoft Azure Site Recovery, which can be exploited to bypass existing security restrictions and elevate...
KLA63960 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET can be exploited remotely to cause deni...
Security Updates for Azure File Sync Agent (February 2024)
The Microsoft Azure File Sync Agent running on the remote host is 16.0 prior to 16.2 or 17.0 prior to 17.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Microsoft Azure Security Vulnerabilities
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure File Sync. The following products and versions are affected: Azure File Sync v17.0,Azure File Sync v16.0,Azure Fil...