CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100265

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88094

The Azure Storage Library is affected by a vulnerability involving the improper neutralization of special elements in output used by a downstream component (injection). This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft;...

Azure Storage Library Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88094: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

KLA91335 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

PT-2026-112912

Name of the Vulnerable Software and Affected Versions Azure Storage Library affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an authorized attacker to elevate privileges over a network. Recommendation...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1762180294)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762180294 advisory. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause...

CVE-2026-51080

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity XXE vulnerability...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:2466-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2466-1 advisory. This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect result...

RHCOS 4 : OpenShift Container Platform 4.17.3 (RHSA-2024:8437)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8437 advisory. - Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service DoS CVE-2024-9676 Not...

JLSEC-2026-295

HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HGread, resulting in denial of service or potential code execution...

nrf Access Control Vulnerability

nrf is a network storage library module open-sourced by free5GC. Versions prior to nrf 1.4.2 contained an access control vulnerability, which stemmed from improper input validation in the EncodeGroupId function. This vulnerability could lead to denial of service attacks...

CLSA-2025-1762180294 podman: Fix of CVE-2024-9676

CVE-2024-9676: fix symlink traversal vulnerability in containers/storage library to prevent hanging and denial of service when running malicious images via automatically assigned user namespace...

EUVD-2024-55025

Malicious code in bioql PyPI...

CVE-2025-36239

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

IBM Storage TS4500 Library Cross-site Scripting Vulnerability

IBM Storage TS4500 Library is a tape library system from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Storage TS4500 Library versions 1.11.0.0 and 2.11.0.0, which originates from an unauthenticated attacker who can embed arbitrary JavaScript code in the...

Linux Distros Unpatched Vulnerability : CVE-2022-30187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Azure Storage Library Information Disclosure Vulnerability CVE-2022-30187 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

Moderate: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...