PT-2025-4812 · Veeam · Veeam Backup For Microsoft Azure

Name of the Vulnerable Software and Affected Versions: Veeam Backup for Microsoft Azure versions prior to 7.1.0.59 Description: Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the...

Veeam Plug-In for Microsoft Azure Vulnerability - CVE-2025-23082

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

USN-7196-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...

Microsoft Azure Marketplace SaaS 访问控制错误漏洞

Microsoft Azure Marketplace SaaS is a marketplace software from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Marketplace SaaS that stems from improper access control and allows an authorized attacker to disclose information over the network...

KLA78851 OSI vulnerability in Microsoft Azure

Information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2025-21380 CVE list CVE-2025-21380 critical Solution Install necessary updates from the KB section, that are listed in your...

USN-7186-1: Linux kernel (Intel IoTG) vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

HubPhish Abuses HubSpot Tools to Target 20,000 European Users for Credential Theft

Cybersecurity researchers have disclosed a new phishing campaign that has targeted European companies with an aim to harvest account credentials and take control of the victims' Microsoft Azure cloud infrastructure. The campaign has been codenamed HubPhish by Palo Alto Networks Unit 42 owing to t...

USN-7154-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7154-1)

"The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7154-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage

A suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as part of a campaign codenamed Operation Digital Eye. The intrusions took place from late June to mid-July 2024, cybersecurity companies...

CVE-2024-49052

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network...

CVE-2024-49052 Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

...

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network...

KLA77601 PE vulnerabilities in Microsoft Azure

An elevation of privilege vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure PolicyWatch can be exploited remotely to gain...

Microsoft Azure Stack HCI 信任管理问题漏洞

Microsoft Azure Stack HCI is a hybrid product from Microsoft Corporation USA that hosts Windows and Linux VMs or containerized workloads and their storage. A trust management issue vulnerability exists in Microsoft Azure Stack HCI, which stems from a vulnerability that can be exploited by an...

KLA77198 PE vulnerability in Microsoft Azure

An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49060 CVE list CVE-2024-49060 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...

Security Bulletin: vulnerability in Microsoft Azure Identity affects IBM Workload Scheduler.

Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Identity that can cause Privilege escalation CVE-2024-35255 Vulnerability Details CVEID:CVE-2024-35255 DESCRIPTION: Microsoft Azure Identity Libraries and Microsoft Authentication Library could allow a local...

Security Bulletin: vulnerability in Microsoft Azure Storage affects IBM Workload Scheduler.

Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Storage that can cause Authorization Bypass CVE-2022-30187 Vulnerability Details CVEID:CVE-2022-30187 DESCRIPTION: Microsoft Azure Storage Library could allow a local authenticated attacker to bypass security...

KLA77105 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in SQL Server Native Client can be exploited remotely to execute arbitrar...

Microsoft Azure CycleCloud 授权问题漏洞

Microsoft Azure CycleCloud is a suite of enterprise-friendly tools from Microsoft Corporation USA for orchestrating and managing high-performance computing HPC environments on Azure. A security vulnerability exists in Microsoft Azure CycleCloud. An attacker exploiting this vulnerability could...