Lucene search
+L

13778 matches found

OSV
OSV
added 2022/07/13 12:00 a.m.76 views

GHSA-64X4-9HC6-R2H6 Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

Summary The Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. Severity...

4.7CVSS4.9AI score0.00532EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/07/13 12:00 a.m.59 views

Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

Summary The Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. Severity...

4.7CVSS5.6AI score0.00532EPSS
SaveExploits0References5Affected Software5
GitLab Advisory Database
GitLab Advisory Database
added 2022/07/13 12:00 a.m.65 views

Exposure of Resource to Wrong Sphere

Azure Storage Library Information Disclosure Vulnerability...

4.7CVSS1.3AI score0.00532EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2022/07/13 12:00 a.m.52 views

Microsoft Azure Site Recovery权限提升漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.1AI score0.02134EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.59 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56577)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.7AI score0.0214EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.35 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56574)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

7.2CVSS3.7AI score0.02267EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.58 views

Microsoft Azure Site Recovery Remote Code Execution Vulnerability (CNVD-2022-56573)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has a remote code execution vulnerability, and no details of the vulnerability are available...

7.2CVSS2.9AI score0.02301EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.55 views

Microsoft Azure Site Recovery Remote Code Execution Vulnerability (CNVD-2022-56575)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has a remote code execution vulnerability, and no details of the vulnerability are available...

7.2CVSS2.9AI score0.02301EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.38 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56593)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.7AI score0.0214EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.65 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57197)

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

6.5CVSS3.6AI score0.01813EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.63 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56592)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.7AI score0.0214EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.39 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56596)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

8.8CVSS3.7AI score0.0112EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.52 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57201)

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

5.5CVSS3.6AI score0.01813EPSS
SaveExploits0
CNVD
CNVD
added 2022/07/13 12:00 a.m.48 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56576)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

6.5CVSS3.7AI score0.01813EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.31 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56580)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.7AI score0.0214EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.52 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57198)

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

5.5CVSS3.6AI score0.01813EPSS
SaveExploits0
CNVD
CNVD
added 2022/07/13 12:00 a.m.71 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57194)

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery elevation of privilege vulnerability can be exploited by attackers to gain elevated privileges on the system...

4CVSS5AI score0.0214EPSS
SaveExploits0
CNVD
CNVD
added 2022/07/13 12:00 a.m.53 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56578)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

6.5CVSS3.7AI score0.01813EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.43 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56581)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

4.9CVSS3.7AI score0.02134EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.42 views

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56597)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

7.8CVSS3.7AI score0.00711EPSS
SaveExploits0References1
Rows per page
Query Builder