Lucene search
+L

401 matches found

Vulnrichment
Vulnrichment
added 2025/10/09 9:04 p.m.2 views

CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability

...

9.6CVSS6.6AI score0.00665EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/09 9:04 p.m.22 views

CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability

...

9.6CVSS0.00665EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/10/09 2:00 p.m.21 views

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability...

9.8CVSS7AI score0.07662EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/09 2:00 p.m.10 views

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability...

9.6CVSS7AI score0.00665EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/09 12:00 a.m.10 views

Microsoft Entra ID 访问控制错误漏洞

Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...

9.8CVSS9.1AI score0.07662EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.12 views

PT-2025-41481

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description An elevation of privilege issue exists in Azure Entra ID. This allows unauthorized access and potential compromise of accounts. Details regarding the technical aspects of exploitation,...

9.7CVSS8.1AI score0.00665EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/10/09 12:00 a.m.9 views

Microsoft Entra ID 访问控制错误漏洞

Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...

9.6CVSS8.9AI score0.00665EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/10/09 12:00 a.m.12 views

KLA89197 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Entra ID can be exploited remotely to gain privilege...

9.8CVSS7.2AI score0.07662EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.18 views

PT-2025-41482

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description A critical elevation of privilege flaw exists in Azure Entra ID formerly Azure Active Directory. An attacker with network access can escalate privileges, potentially gaining...

9.8CVSS7.1AI score0.07662EPSS
SaveExploits0References7
Microsoft Secure
Microsoft Secure
added 2025/10/07 4:00 p.m.40 views

New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Building on the momentum of our initial launch of the Microsoft Secure Future Initiative SFI patterns and practices, this second installment continues our commitment to making security implementation practical and scalable. The first release introduced a foundational library of actionable guidanc...

7.2AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-19111

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01463EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-46549

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.0041EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-27515

Malicious code in bioql PyPI...

4.4CVSS6.5AI score0.00142EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-26868

Malicious code in bioql PyPI...

10CVSS6.7AI score0.01554EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-17031

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00345EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/10/01 11:22 p.m.8 views

SUSE CVE-2025-59044

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...

7.1CVSS6.6AI score0.00142EPSS
SaveExploits0References4
Spring Security Advisories
Spring Security Advisories
added 2025/09/30 12:00 a.m.20 views

This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

6.8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/09/24 5:00 p.m.20 views

Retail at risk: How one alert uncovered a persistent cyberthreat​​

In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing security compromises in the past year, the risks for businesses continue to increase...

8.8CVSS8.6AI score0.99995EPSS
SaveExploits9
HackRead
HackRead
added 2025/09/23 9:23 p.m.13 views

Microsoft Fixed Entra ID Vulnerability Allowing Global Admin Impersonation

Microsoft patched an Entra ID vulnerability that let attackers impersonate Global Admins across tenants, risking full Microsoft 365 and Azure takeover...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/09/22 5:47 a.m.8 views

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

A critical token validation failure in Microsoft Entra ID previously Azure Active Directory could have allowed attackers to impersonate any user, including Global Administrators, across any tenant. The vulnerability, tracked as CVE-2025-55241 , has been assigned the maximum CVSS score of 10.0. It...

10CVSS8.7AI score0.07448EPSS
SaveExploits0
Rows per page
Query Builder