HighCVSS 7.8
EPSS 0.71%
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
Technology
Cloud Platforms vulnerabilities
Public cloud services and their SDKs/agents (AWS, Azure, Google Cloud). 1,417 published CVES affecting Cloud Platforms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,417
- Critical
- 242
- High
- 530
- Medium
- 447
- Low
- 33
- Unscored
- 165
- CISA KEV
- 8
Latest Cloud Platforms CVEs
Newest publication first · page 36 of 40 · showing the latest 1,000
-
-
MediumCVSS 6.4 EPSS 0.61%
Azure Kinect SDK Remote Code Execution Vulnerability
-
HighCVSS 8.6 EPSS 0.55%
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious...
-
CriticalCVSS 9.9 EPSS 0.59%
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires hum...
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
MAL-2024-4212 Malicious code in Be.Vlaaոderen.Basisregisters.Aws.DistribսtedS3Cache (NuGet)
PublishedUnknown-= Per source details. Do not edit below this line.=-
-
Unknown
-= Per source details. Do not edit below this line.=-
-
MAL-2024-4414 Malicious code in Bе.Vlaaոderen.Basisregisters.Aws.DistribսtedS3Cachе (NuGet)
PublishedUnknown-= Per source details. Do not edit below this line.=-
-
MediumCVSS 5.4 EPSS 0.31%
SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. SFTPGo WebAdmin and WebClient support password reset. This feature is disabled in the default configuration. In SFTPGo versions prior to v2.6.1, if the...
-
HighCVSS 8.1 EPSS 1.1%
Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
-
HighCVSS 7.1 EPSS 0.83%
Azure Monitor Agent Elevation of Privilege Vulnerability
-
MediumCVSS 4.4 EPSS 0.74%
Microsoft Azure File Sync Elevation of Privilege Vulnerability
-
HighCVSS 7.5 EPSS 2.5%
Azure Storage Movement Client Library Denial of Service Vulnerability
-
MediumCVSS 5.5 EPSS 0.83%
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 0.25%
The AWS Deployment Framework (ADF) is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in...
-
HighCVSS 7.5 EPSS 0.17%
SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0.
-
HighCVSS 7.2 EPSS 0.34%
A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0. This vulnerability allows attackers to send crafted requests that could result in unauthorized access to the local network and potentially sensitive informa...
-
HighCVSS 8.6 EPSS 37.1%
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the save_url_to_cache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is us...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.