13724 matches found
dotnet: X509 Certificates - Validation Bypass across Azure
A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggerin...
Important: Red Hat Security Advisory: .NET 7.0 security update
An update for .NET 7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Integer Overflow
Azure uAMQP is vulnerable to Integer Overflow. The vulnerability is caused due to a missing check for the binary value length in the internaldecoderdecodebytes function within amqpvalue.c. An attacker can possibly trigger Remote Code Execution as a result of this flaw...
Microsoft Azure IPAM Authorization Issues Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure IPAM that stems from a lack of validation of incoming authentication tokens. An attacker exploiting this vulnerability could impersonat...
PT-2024-18988 · Microsoft · Azure Ipam
Name of the Vulnerable Software and Affected Versions: Azure IPAM versions prior to 3.0.0 Description: The issue concerns the lack of validation of the passed-in authentication token in Azure IPAM, which may allow an attacker to impersonate any privileged user and access data stored within the IP...
Microsoft Azure IdentityModel Code Injection Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Azure IdentityModel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1...
Ubuntu: Security Advisory (USN-6573-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-6572-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ALSA-2024:0151 Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15...
USN-6573-1: Linux kernel (Azure) vulnerabilities
Lucas Leong discovered that the netfilter subsystem in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel memory. CVE-2023-39189 Kyle Zeng...
CVE-2024-20676
Azure Storage Mover Remote Code Execution Vulnerability...
CVE-2024-20676
Azure Storage Mover Remote Code Execution Vulnerability...
Remote code execution
Azure Storage Mover Remote Code Execution Vulnerability...
USN-6572-1: Linux kernel (Azure) vulnerabilities
Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service system crash. CVE-2023-31085 Bien Pham discovered that the netfiler subsystem in the Linux...
CVE-2024-20676
CVE-2024-20676 – Azure Storage Mover Remote Code Execution is documented with a CVSSv3 base score of 8.0 (HIGH) and a network attack vector requiring high complexity and high privileges, with no user interaction. The vulnerability affects Azure Storage Mover components and can lead to arbitrary c...
CVE-2024-20676 Azure Storage Mover Remote Code Execution Vulnerability
...
CVE-2024-20676 Azure Storage Mover Remote Code Execution Vulnerability
...
Qualys and Microsoft Sunset Embedded Integration of Qualys Solutions for Microsoft Defender for Cloud
Qualys offers a holistic risk-based approach to securing modern cloud workloads Over the past three years, Qualys has had a strong collaboration with Microsoft, with Qualys providing the vulnerability assessment engine for Microsoft Defender for Cloud, covering infrastructure and container...
