579 matches found
CVE-2021-31414: Undefined Security Weakness
The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...
CVE-2021-22539
An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...
Swissknife - Scriptable VSCode Extension To Generate Or Manipulate Data. Stop Pasting Sensitive Data In Webpag
The developers swissknife. Do conversions and generations right out of vs code. Extendable with user scripts Available in the Visual Studio Marketplace Currently available scripts Base64 decode Base64 encode Binary To Text Bip39 Mnemonic CSV to Markdown Count characters Count words Crypto currenc...
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
vscode-glsllint 安全漏洞
vscode-glsllint is an unofficial VSCode extension for open source. The extension supports lint's GLS OpenGL Shading Language. It uses the OpenGL and OpenGL ES shader validators to validate each shader type supported by glslangValidator. A security vulnerability exists in vscode-glsllint versions...
vscode-rufo code execution vulnerability
vscode-rufo is a Visual Studio code through Rufo provides formatting extensions to the application. A code execution vulnerability exists in vscode-rufo in versions prior to 0.0.4, which can be exploited by an attacker to execute arbitrary code on a system...
Code injection
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...
CVE-2021-21420
CVE-2021-21420 affects the vscode-stripe extension for Visual Studio Code. The vulnerability arises when the extension loads an untrusted repository containing malicious settings, allowing an attacker to execute arbitrary code in the context of the current user. The available documentation states...
CVE-2021-21420
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
Code injection
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
CVE-2021-22195 affects the GitLab VSCode extension (gitlab-vscode-extension) v3.15.0 and earlier. It enables client-side code execution, allowing an attacker to run code on the user’s system. The connected documents corroborate vulnerable component and impact but do not provide exploit steps, spe...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195: Uncontrolled Search Path Element
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
PT-2021-14906
Name of the Vulnerable Software and Affected Versions: gitlab-vscode-extension versions 3.15.0 and earlier Description: The issue allows for client-side code execution, enabling an attacker to execute code on a user's system. Recommendations: For gitlab-vscode-extension versions 3.15.0 and earlie...
GitLab gitlab-vscode-extension 代码问题漏洞
Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...
CVE-2021-21420: Improper Neutralization of Special Elements in Output Used by a Downstream Component
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...
