Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCVE-2025-38724 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.4%Oct 15, 2026
- UnknownCVE-2024-57904 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.2%Oct 15, 2026
- UnknownCVE-2024-53214 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.3%Oct 15, 2026
- UnknownCVE-2024-53194 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.2%Oct 15, 2026
- Unknownazure-storage-azcopy-10.32.8-2.1 on GA mediaOct 15, 2026
- Unknownlinux-azure, linux-azure-fde, linux-azure-fips vulnerabilitiesOct 13, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerOct 13, 2026
- Unknownlinux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilitiesOct 13, 2026
- Unknownlinux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-rasOct 13, 2026
- UnknownMalicious code in @newspage/libx-amount (npm)Oct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityKEVEPSS 1.5%Oct 13, 2026
- High7.5On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in…Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…EPSS 0.2%Oct 12, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Azure deploymentsOct 12, 2026
- Medium6.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.Oct 8, 2026
- High8.1Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.Oct 8, 2026
- High8.7Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Oct 8, 2026
- Medium5.8ZDI-26-629: Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure VulnerabilitySep 9, 2026
- Critical10.0Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.EPSS 0.8%Sep 3, 2026
- Critical10.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Sep 3, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.Aug 21, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionKEVJul 8, 2026
- Critical9.8Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.May 22, 2026
- Critical9.8Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.May 22, 2026
105 records · page 1 of 5
PreviousNext