EUVD-2023-40380

Malicious code in bioql PyPI...

Azure Identity SDK < 4.2.1

The version of Azure Identity installed on the remote host is prior to 4.2.1. It is, therefore, affected by a vulnerability: - Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 Note that Nessus has not tested for this issue but has...

Security Bulletin: A vulnerability in Microsoft Azure Identity SDK may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution. (CVE-2023-36414).

Summary There is a vulnerability in Microsoft Azure Identity SDK used by IBM Robotic Process Automation as part of API configuration. An attacker could exploit this vulnerability to execute arbitrary code on the system, caused by an integer overflow. CVE-2020-36414. Vulnerability Details...

CVE-2023-36414

Azure Identity SDK Remote Code Execution Vulnerability...

CVE-2023-36415

Azure Identity SDK Remote Code Execution Vulnerability...

Remote code execution

Azure Identity SDK Remote Code Execution Vulnerability...

CVE-2023-36414 Azure Identity SDK Remote Code Execution Vulnerability

...

CVE-2023-36415 Azure Identity SDK Remote Code Execution Vulnerability

...

CVE-2023-36415 Azure Identity SDK Remote Code Execution Vulnerability

...

Azure Identity SDK Remote Code Execution Vulnerability

...

Azure Identity SDK Remote Code Execution Vulnerability

...

PT-2023-25569 · Microsoft · Azure Identity Sdk

Name of the Vulnerable Software and Affected Versions: Azure Identity SDK affected versions not specified Description: The Azure Identity SDK is vulnerable to remote code execution. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2023-25570 · Microsoft · Azure Identity Sdk

Name of the Vulnerable Software and Affected Versions: Azure Identity SDK affected versions not specified Description: The issue concerns a remote code execution vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Azure Identity SDK Remote Code Execution Vulnerability...