36481 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-11584
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it...
Reducing False Positives with Active Behavioral Analysis for Cloud Security
Rule-based cloud security posture management CSPM solutions are known to produce a lot of false positives based on the limited contextual understanding and dependence on static heuristics testing. This paper introduces a validation-driven methodology that integrates active behavioral testing in...
CVE-2025-49264
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform...
CVE-2025-52618 HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries...
CVE-2025-2180
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2181
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2024-52964
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9 and below 7.0.13 & FortiManager Cloud version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5 and before 7.2...
Malicious code in orangutan-cloud-gen530-project (npm)
The package orangutan-cloud-gen530-project was found to contain malicious code...
Malicious code in cloud-giraffe-wry163-project (npm)
The package cloud-giraffe-wry163-project was found to contain malicious code...
Malicious code in dolphin-cloud-kqk279-project (npm)
The package dolphin-cloud-kqk279-project was found to contain malicious code...
Malicious code in cloud-hill-lqn834-project (npm)
The package cloud-hill-lqn834-project was found to contain malicious code...
MAL-2025-38470 Malicious code in vista-cloud-lcp858-project (npm)
The package vista-cloud-lcp858-project was found to contain malicious code...
Malicious code in vista-cloud-lcp858-project (npm)
The package vista-cloud-lcp858-project was found to contain malicious code...
Malicious code in cloud-shell-extension (npm)
The package cloud-shell-extension was found to contain malicious code...
MAL-2025-18095 Malicious code in db2-on-cloud-rest (npm)
The package db2-on-cloud-rest was found to contain malicious code...
MAL-2025-18607 Malicious code in dolphin-cloud-kqk279-project (npm)
The package dolphin-cloud-kqk279-project was found to contain malicious code...
MAL-2025-31572 Malicious code in rain-load-cloud-balance-runtime (npm)
The package rain-load-cloud-balance-runtime was found to contain malicious code...