4689 matches found
EUVD-2026-54313
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54319
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
EUVD-2026-54312
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54318
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54317
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2026-70615
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...
EUVD-2026-53584
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...
CVE-2026-70615
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...
CVE-2026-70615
Boringproxy 0.10.0 is affected by a newline injection in the tunnel-creation endpoint’s domain parameter, enabling authenticated, low-privilege users with tunnel-creation permission to inject lines into the SSH authorized_keys file. This may allow insertion of an unrestricted public key, granting...
CVE-2026-71269
CVE-2026-71269 affects Node-RED’s local-filesystem library storage module (getLibraryEntry() and saveLibraryEntry() in packages/node_modules/@node-red/runtime/lib/storage/localfilesystem/library.js). The vulnerability arises because GET/POST requests to /library/:lib/:type/*path join the user-sup...
EUVD-2026-53354
Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...
