Lucene search
+L

578 matches found

CVE
CVE
•added 2021/03/31 4:58 p.m.•66 views

CVE-2021-29658

The CVE-2021-29658 entry concerns the vscode-rufo extension for Visual Studio Code, specifically versions before 0.0.4. The vulnerability allows an attacker to execute arbitrary binaries/code when a user opens a crafted workspace folder. Concrete details across connected documents consistently de...

8.8CVSS8.8AI score0.01243EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/03/31 4:58 p.m.•45 views

CVE-2021-29658

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...

9.1AI score0.01243EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/31 12:00 a.m.•10 views

CVE-2021-29658: Undefined Security Weakness

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...

8.8CVSS6.3AI score0.01243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/31 12:00 a.m.•5 views

PT-2021-18387

Name of the Vulnerable Software and Affected Versions vscode-rufo extension versions prior to 0.0.4 Description The issue allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder. This can be exploited when a user opens a specifically designed workspace folder,...

8.8CVSS0.01243EPSS
SaveExploits0References8
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•50 views

Unspecified vulnerability in vscode-swiftformat (CNVD-2021-29562)

vscode-swiftformat is an open source application. Automatically organize Swift code through SwiftFormat. A security vulnerability exists in vscode-swiftformat versions prior to 2.12.1, which can be exploited by attackers to execute arbitrary code...

7.8CVSS7.6AI score0.01678EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•22 views

Unspecified vulnerability in vscode-swiftformat

vscode-swiftformat is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-swiftformat prior to 1.3.7, which can be exploited by attackers to execute arbitrary code on a system...

7.8CVSS7.8AI score0.01624EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•25 views

Unspecified vulnerability in vscode-apple-swift-format

vscode-apple-swift-format is an unofficial VS Code extension for open source. Used to format Swift code using apple / swift-format. A security vulnerability exists in versions prior to vscode-apple-swift-format 1.1.2, which can be exploited by attackers to execute arbitrary code on a system...

7.8CVSS7.8AI score0.01714EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•49 views

Unspecified vulnerability in vscode-shellcheck

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

9.8CVSS7.8AI score0.01831EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/24 12:00 a.m.•22 views

Xavier Hahn vscode-matlab 默认配置问题漏洞

Xavier Hahn vscode-matlab is an open source application by Xavier Hahn. MATLAB extension before 2.0.1 suffers from a Default Configuration Issue vulnerability that can be exploited by an attacker to execute arbitrary code via a crafted workspace...

9.8CVSS8.8AI score0.02251EPSS
SaveExploits0References5
NVD
NVD
•added 2021/03/22 7:15 a.m.•32 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS0.01539EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/03/22 7:15 a.m.•21 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS7.6AI score
SaveExploits0References4
Prion
Prion
•added 2021/03/22 7:15 a.m.•22 views

Code injection

UNSUPPORTED WHEN ASSIGNED The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

6.8CVSS8.8AI score0.01539EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/03/22 7:15 a.m.•11 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS8.4AI score0.01539EPSS
SaveExploits0References6
CVE
CVE
•added 2021/03/22 6:11 a.m.•60 views

CVE-2021-28956

The CVE-2021-28956 entry covers the unofficial vscode-sass-lint extension for Visual Studio Code, vulnerable through version 1.0.7. The root issue enables an attacker to cause execution of arbitrary binaries when a user opens a crafted workspace. The affected component is the vscode-sass-lint ext...

8.8CVSS8.8AI score0.01539EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2021/03/22 6:11 a.m.•4 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS0.01539EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/03/22 6:11 a.m.•34 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

9.1AI score0.01539EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/22 12:00 a.m.•7 views

CVE-2021-28956: Undefined Security Weakness

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS6.4AI score0.01539EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/19 12:00 a.m.•21 views

vscode-swiftlint code execution vulnerability

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS7.9AI score0.01678EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/18 12:00 a.m.•19 views

vscode-shellcheck 安全漏洞

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

9.8CVSS6.3AI score0.01831EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2021/02/14 2:01 p.m.•132 views

Exploit for CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https...

7.8CVSS7.8AI score0.06003EPSS
SaveExploits2
Rows per page
Query Builder