CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38220 – Azure Stack Hub Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38220
10 Sep 2024 — Azure Stack Hub Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38220 • CWE-284: Improper Access Control •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38216 – Azure Stack Hub Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38216
10 Sep 2024 — Azure Stack Hub Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38216 • CWE-20: Improper Input Validation •
CVSS: 9.6EPSS: 0%CPEs: 2EXPL: 0CVE-2024-38175 – Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38175
20 Aug 2024 — An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38175 • CWE-284: Improper Access Control •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-2024-38109 – Azure Health Bot Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38109
13 Aug 2024 — An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38109 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2024-38195 – Azure CycleCloud Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38195
13 Aug 2024 — Azure CycleCloud Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38195 • CWE-284: Improper Access Control •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38162 – Azure Connected Machine Agent Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38162
13 Aug 2024 — Azure Connected Machine Agent Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38162 • CWE-284: Improper Access Control •
CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38158 – Azure IoT SDK Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38158
13 Aug 2024 — Azure IoT SDK Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38158 • CWE-416: Use After Free •
CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38157 – Azure IoT SDK Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38157
13 Aug 2024 — Azure IoT SDK Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38157 • CWE-415: Double Free •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38098 – Azure Connected Machine Agent Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38098
13 Aug 2024 — Azure Connected Machine Agent Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38098 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38201 – Azure Stack Hub Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-38201
13 Aug 2024 — Azure Stack Hub Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38201 • CWE-20: Improper Input Validation •