Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.EPSS 0.8%Mar 19, 2026
- Critical9.8Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.EPSS 0.8%Mar 19, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…EPSS 0.4%Mar 18, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.EPSS 0.5%Mar 18, 2026
- High7.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.EPSS 0.2%Mar 11, 2026
- Critical10.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.EPSS 0.8%Mar 11, 2026
- Medium4.8Supabase Auth is a JWT based API for managing users and issuing JWT tokens.EPSS 0.2%Mar 11, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.EPSS 1.1%Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.EPSS 0.9%Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.8Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- High7.5Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.EPSS 1.0%Mar 10, 2026
- High7.5Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.EPSS 0.8%Mar 10, 2026
- High7.5Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.EPSS 0.7%Mar 10, 2026
- High7.8Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- Medium6.7'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 5, 2026
- Medium6.5Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network.EPSS 1.0%Mar 5, 2026
- Medium6.7Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.EPSS 0.6%Mar 5, 2026
- Critical9.8Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenti…EPSS 0.7%Mar 3, 2026
- Critical9.8The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5.EPSS 0.7%Mar 3, 2026
- High8.5tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports.Feb 25, 2026
- High8.8Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.EPSS 0.7%Dec 9, 2025
- Critical9.8Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.EPSS 125.0%May 13, 2025