Lucene search
+L

13434 matches found

Cvelist
Cvelist
added 2026/05/11 4:41 p.m.39 views

CVE-2026-42316 KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer Kusto. Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled values inside the kusto.tables.topics.mapping configuration. The db, table, mapping, and format fields of each mapping...

6.5CVSS0.00344EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/11 4:41 p.m.11 views

CVE-2026-42316 KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer Kusto. Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled values inside the kusto.tables.topics.mapping configuration. The db, table, mapping, and format fields of each mapping...

6.5CVSS6.1AI score0.00344EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/11 4:41 p.m.8 views

CVE-2026-42316 KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer Kusto. Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled values inside the kusto.tables.topics.mapping configuration. The db, table, mapping, and format fields of each mapping...

6.5CVSS6.2AI score
SaveExploits0References5
CVE
CVE
added 2026/05/11 4:41 p.m.19 views

CVE-2026-42316

Summary: The kafka-sink-azure-kusto Kafka Connect plugin (Microsoft’s sink for Azure Data Explorer) is affected by a KQL injection vulnerability in the kusto.tables.topics.mapping configuration. Before version 5.2.3, db/table/mapping/format fields were interpolated directly into KQL commands via ...

6.5CVSS6.1AI score0.00344EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/05/11 1:2 a.m.19 views

[SECURITY] Fedora 43 Update: rclone-1.74.0-2.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

9.8CVSS5.8AI score0.32715EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.19 views

PT-2026-39660

kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer Kusto. Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled values inside the kusto.tables.topics.mapping configuration. The db, table, mapping, and format fields of each mapping...

6.5CVSS6.1AI score0.00344EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/11 12:0 a.m.13 views

Microsoft Azure Data Explorer Kafka Connect Kusto Sink Connector 安全漏洞

The Microsoft Azure Data Explorer Kafka Connect Kusto Sink Connector is an open-source Kafka data synchronization connector to Azure Big Data Analysis databases. Versions of the Kusto Sink Connector prior to version 5.2.3 have security vulnerabilities. These vulnerabilities stem from uncleaned...

6.5CVSS6.1AI score0.00344EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.18 views

CVE-2026-43110 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

8.8CVSS5.2AI score0.00244EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.32 views

CVE-2026-43111 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

7.8CVSS5.2AI score0.00117EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.16 views

GHSA-24VC-PXRH-RPJV vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.23 views

CVE-2026-43112 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

8.8CVSS6.7AI score0.00352EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.23 views

CVE-2026-43228 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-gcp, linux-azure, linux-qemu...

5.5CVSS5.6AI score0.00112EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.15 views

GHSA-24H4-22F3-65QC vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.26 views

GHSA-G4P6-4X9W-QFQ5 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-gcp, linux-azure, linux-qemu...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.17 views

GHSA-MV3M-X6QP-J4P5 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-aws...

5.2AI score
SaveExploits0
Fedora
Fedora
added 2026/05/10 2:55 a.m.16 views

[SECURITY] Fedora 44 Update: rclone-1.74.0-2.fc44

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

9.8CVSS5.8AI score0.32715EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.18 views

CVE-2026-35435

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.01164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.16 views

CVE-2026-41105

Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...

8.1CVSS5.8AI score0.00827EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.11 views

CVE-2026-42826

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network...

10CVSS5.8AI score0.0084EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.20 views

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

9.9CVSS6AI score0.00711EPSS
SaveExploits0References1
Rows per page
Query Builder