Page 5 of 394 results (0.018 seconds)

CVSS: 6.8EPSS: 0%CPEs: 3EXPL: 0

08 Oct 2024 — Azure Service Fabric for Linux Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43480 • CWE-122: Heap-based Buffer Overflow •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0

08 Oct 2024 — Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38179 • CWE-862: Missing Authorization •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

08 Oct 2024 — Azure Monitor Agent Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38097 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 9.0EPSS: 0%CPEs: 8EXPL: 0

10 Sep 2024 — Microsoft SQL Server Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37980 • CWE-269: Improper Privilege Management •

CVSS: 9.9EPSS: 0%CPEs: 2EXPL: 0

10 Sep 2024 — An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38194 • CWE-20: Improper Input Validation •

CVSS: 7.3EPSS: 0%CPEs: 1EXPL: 0

10 Sep 2024 — Azure Network Watcher VM Agent Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43470 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 9.0EPSS: 0%CPEs: 16EXPL: 0

10 Sep 2024 — Azure CycleCloud Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43469 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

10 Sep 2024 — Microsoft SQL Server Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37341 • CWE-284: Improper Access Control •

CVSS: 9.0EPSS: 0%CPEs: 8EXPL: 0

10 Sep 2024 — Microsoft SQL Server Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37965 • CWE-20: Improper Input Validation •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

10 Sep 2024 — Azure Network Watcher VM Agent Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38188 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •