Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 544

Export CSV
CVE-2023-23382

Azure Machine Learning Compute Instance Information Disclosure Vulnerability

Azure Machine Learning Compute Instance Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Microsoft
Products
Azure Machine Learning
CVE-2023-21531

Azure Service Fabric Container Elevation of Privilege Vulnerability

Azure Service Fabric Container Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Service Fabric
CVE-2024-38194

Azure Web Apps Elevation of Privilege Vulnerability

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

CVSS 3.1 · 8.4 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Azure Web Apps
CVE-2024-43469

Azure CycleCloud Remote Code Execution Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Microsoft
Products
Azure Cyclecloud
CVE-2024-38220

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 9 Critical EPSS 1.0% KEV · Not listed
Vendors
Microsoft
Products
Azure Stack Hub
CVE-2024-38216

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Stack Hub
CVE-2023-48315

Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to ftp and sntp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 3.1 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Microsoft
Products
Azure Rtos Netx Duo
CVE-2024-25110

Azure IoT Platform Device SDK Remote Code Execution Vulnerability

The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule with commit `30865c9c`. There are no known workarounds for this vulnerability.

CVSS 3.1 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Microsoft
Products
Azure Uamqp