1337 matches found
CVE-2025-20378: URL Redirection to Untrusted Site
In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the returnto parameter of the Splunk Web login endpoint. When an authenticated user...
SUSE CVE-2025-59823
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...
The vulnerability of the Azure cloud platform’s Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Azure cloud platform’s Windows operating system is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Unspecified Vulnerability in Microsoft Azure (CNVD-2025-24645)
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. Microsoft Azure has a security vulnerability that can be exploited by an attacker who can elevate privileges...
CVE-2024-13991
CVE-2024-13991 affects Huijietong Cloud Video Platform. The vulnerability is a path traversal / arbitrary file read in the /fileDownload?action=downloadBackupFile endpoint, exploitable by an unauthenticated attacker who can supply arbitrary paths via the fullPath parameter. Multiple sources confi...
Microsoft Azure 安全漏洞
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. Microsoft Azure has a security vulnerability that can be exploited by an attacker who can elevate privileges...
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) relates to the lack of authentication for a critical function, allowing attackers to escalate their privileges.
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
The vulnerability of the cloud platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) relates to deficiencies in access control. This allows attackers to escalate their privileges.
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
EUVD-2018-14264
Malware in sbrugna...
EUVD-2020-21120
Malware in sbrugna...
EUVD-2018-11832
Malware in sbrugna...
EUVD-2018-10680
Malware in sbrugna...
EUVD-2020-29742
Malware in sbrugna...
EUVD-2021-18801
Malware in sbrugna...
EUVD-2020-29746
Malware in sbrugna...
EUVD-2020-27356
Malware in sbrugna...
EUVD-2020-29764
Malware in sbrugna...
EUVD-2025-25125
Malicious code in bioql PyPI...