792 matches found
Azure Marketplace SaaS Resources Information Disclosure Vulnerability
Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network...
PT-2025-1061 · Microsoft · Azure Saas Resources
Name of the Vulnerable Software and Affected Versions: Azure SaaS Resources affected versions not specified Description: The issue is related to improper access control in Azure SaaS Resources, which allows an authorized attacker to disclose information over a network. This can potentially lead t...
Microsoft Azure Marketplace SaaS 访问控制错误漏洞
Microsoft Azure Marketplace SaaS is a marketplace software from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Marketplace SaaS that stems from improper access control and allows an authorized attacker to disclose information over the network...
From $22M in Ransom to +100M Stolen Records: 2025's All-Star SaaS Threat Actors to Watch
In 2024, cyber threats targeting SaaS surged, with 7,000 password attacks blocked per second just in Entra ID—a 75% increase from last year—and phishing attempts up by 58%, causing $3.5 billion in losses source: Microsoft Digital Defense Report 2024. SaaS attacks are increasing, with hackers ofte...
PT-2024-36767 · Unknown · Debuggers Studio Saaspricing
Name of the Vulnerable Software and Affected Versions: Debuggers Studio SaasPricing versions 1.1.4 and earlier Description: The issue affects Debuggers Studio SaasPricing, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting...
SaaS Budget Planning Guide for IT Professionals
SaaS services are one of the biggest drivers of OpEx operating expenses for modern businesses. With Gartner projecting $247.2 billion in global SaaS spending this year, it's no wonder SaaS budgets are a big deal in the world of finance and IT. Efficient SaaS utilization can significantly affect...
What is Nudge Security and How Does it Work?
Regain control of SaaS sprawl with Day One discovery of all SaaS and GenAI accounts along with workflows to help you mitigate security risks, curb rogue app usage, and manage SaaS spend. In today's highly distributed workplace, every employee has the ability to act as their own CIO, adopting new...
CVE-2024-52271
User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...
CVE-2024-52271
CVE-2024-52271 concerns Documenso where the UI misrepresents critical information, enabling content spoofing. The issue is observed when a document is printed or when layers are downloaded; the displayed version does not flatten layers, so not all layers are rendered in the output. Affected produ...
CVE-2024-52271 PDF Document Spoofing in Documenso
User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...
PT-2024-9243 · Documenso · Documenso
Name of the Vulnerable Software and Affected Versions: Documenso versions through 1.8.0 Documenso SaaS Hosted as of 2024-12-05 Description: The issue is related to the User Interface UI Misrepresentation of Critical Information in Documenso, allowing Content Spoofing. The displayed version does n...
CVE-2024-52269
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...
CVE-2024-52269
The CVE-2024-52269 entry (and related CVE-2024-52276) concerns DocuSign UI where hidden content rendered after signing can be misrepresented, enabling content spoofing. Technical details in connected sources show the issue affects DocuSign up to 2024-12-04 and involves a misrendering of layered c...
CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...
CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...
Sentry improper error handling leaks Application Integration Client Secret
Impact During routine testing, we identified a scenario where a specific error message generated by our platform could include a plaintext Client ID and Client Secret for an application integration. The Client ID and Client Secret would not be displayed in the UI, but would be returned in the...
PYSEC-2024-310
Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...
CVE-2024-31141
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...
CVE-2024-31141
CVE-2024-31141 affects Apache Kafka Clients (2.3.0–3.7.0, including 3.5.2 and 3.6.2) with ConfigProvider plugins that read from disk or environment variables via FileConfigProvider/DirectoryConfigProvider/EnvVarConfigProvider. The root cause is improper privilege management that allows untrusted ...
