HighCVSS 7.3
EPSS 0.86%
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
Technology
Cloud Platforms vulnerabilities
Public cloud services and their SDKs/agents (AWS, Azure, Google Cloud). 1,417 published CVES affecting Cloud Platforms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,417
- Critical
- 242
- High
- 530
- Medium
- 447
- Low
- 33
- Unscored
- 165
- CISA KEV
- 8
Latest Cloud Platforms CVEs
Newest publication first · page 35 of 40 · showing the latest 1,000
-
-
HighCVSS 8.8 EPSS 1.6%
Azure CycleCloud Remote Code Execution Vulnerability
-
CriticalCVSS 9.0 EPSS 1.0%
Azure Stack Hub Elevation of Privilege Vulnerability
-
HighCVSS 7.1 EPSS 0.58%
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
-
CriticalCVSS 9.0 EPSS 0.92%
Azure Stack Hub Elevation of Privilege Vulnerability
-
CVE-2024-45043 OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability
PublishedMediumCVSS 5.3 EPSS 0.49%The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the records received based on the configured record type. awsfirehosereceiver allows unauthenticated remote requests, even when configured to r...
-
CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
PublishedMediumCVSS 6.4 EPSS 0.31%The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-buil...
-
Unknown
-= Per source details. Do not edit below this line.=- Source: kam193 (aa8974ecfad0d7fc824d50482bd3fb2954373e3b2227d1adc2220bc309c258f1) Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm....
-
CVE-2024-38175 Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability
PublishedHighCVSS 8.8 EPSS 0.79%An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.
-
HighCVSS 7.5 EPSS 0.39%
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
-
MediumCVSS 5.9 EPSS 0.19%
The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.
-
MediumCVSS 5.4 EPSS 0.27%
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin
-
HighCVSS 8.8 EPSS 1.8%
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
-
HighCVSS 7.8 EPSS 0.51%
Azure CycleCloud Remote Code Execution Vulnerability
-
HighCVSS 7.0 EPSS 0.43%
Azure IoT SDK Remote Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 0.51%
Azure Connected Machine Agent Elevation of Privilege Vulnerability
-
HighCVSS 7.0 EPSS 0.48%
Azure IoT SDK Remote Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 0.63%
Azure Connected Machine Agent Elevation of Privilege Vulnerability
-
HighCVSS 7.0 EPSS 0.65%
Azure Stack Hub Elevation of Privilege Vulnerability
-
CriticalCVSS 9.3 EPSS 1.2%
Azure Stack Hub Spoofing Vulnerability
-
MediumCVSS 6.3
Impact An API ordering issue in s2n-tls can cause client authentication to unexpectedly not be enabled on the server when it otherwise appears to be. Server applications are impacted if client authentication is enabled by calling s2n_connection_set_config() before calling s2n_con...
-
Unknown
-= Per source details. Do not edit below this line.=- Source: kam193 (73ea760146181d2911e0823c121502506892b2e63d3fc20d6281fb2c86e03de8) Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. Category: PRO...
-
CVE-2024-41806 Open edX Platform's instructor upload CSV for cohort creation not Private by Default
PublishedMediumCVSS 5.3 EPSS 0.33%The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, uploads may become pub...
-
HighCVSS 7.5 EPSS 0.71%
Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (object_store crate), version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity https://...
-
HighCVSS 8.8 EPSS 1.6%
Azure CycleCloud Elevation of Privilege Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.