Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.EPSS 0.5%May 7, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.EPSS 0.4%May 6, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.EPSS 0.4%May 4, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…EPSS 0.3%Apr 29, 2026
- Critical9.9Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Apr 24, 2026
- Medium6.5The and connection properties were not marked as sensitive names in secrets masker.EPSS 0.6%Apr 15, 2026
- High7.8Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.EPSS 2.5%Apr 14, 2026
- High8.8Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.EPSS 0.8%Apr 14, 2026
- High7.8Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.EPSS 0.4%Apr 9, 2026
- High7.7OpenObserve is a cloud-native observability platform.EPSS 0.4%Apr 7, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- High7.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.EPSS 1.0%Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.EPSS 1.1%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Apr 3, 2026
- Medium6.5Payload is a free and open source headless content management system.EPSS 0.4%Apr 1, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.EPSS 0.2%Apr 1, 2026
- High8.1Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) d…EPSS 0.4%Mar 27, 2026
- Medium4.3Cilium is a networking, observability, and security solution with an eBPF-based dataplane.EPSS 0.3%Mar 27, 2026
- High7.1Wallos is an open-source, self-hostable personal subscription tracker.EPSS 0.4%Mar 24, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.EPSS 0.4%Mar 20, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Mar 19, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.EPSS 0.8%Mar 19, 2026