Lucene search
+L

6400 matches found

Cvelist
Cvelist
•added 2021/04/25 2:55 a.m.•33 views

CVE-2021-30502

The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...

9.9AI score0.02899EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/25 12:00 a.m.•10 views

CVE-2021-30502: Undefined Security Weakness

The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...

9.8CVSS6.2AI score0.02899EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/25 12:00 a.m.•6 views

PT-2021-18765

Name of the Vulnerable Software and Affected Versions vscode-ghc-simple extension versions prior to 0.2.3 Description The issue allows remote code execution via a crafted workspace configuration with replCommand. This can be exploited by an attacker to execute malicious code. Recommendations For...

9.8CVSS0.02899EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/04/24 12:00 a.m.•22 views

vscode-ghc-simple 安全漏洞

vscode-ghc-simple is a software application. A quick fix operation is provided. A security vulnerability exists in vscode-ghc-simple. The vulnerability allows remote code execution via a manual workspace configuration using replCommand...

9.8CVSS9.1AI score0.02899EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/04/22 12:00 a.m.•92 views

Lex Li vscode-restructuredtext access control error vulnerability

Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...

9.8CVSS3.8AI score0.0163EPSS
SaveExploits0References1
Citrix
Citrix
•added 2021/04/22 12:00 a.m.•17 views

Citrix Storefront: Stale store entry seen on workspace app

Situation: Customer who had initially two stores created on their storefront console, created a third store and then the third store was deleted. However, when they connect to their Workspace app, it still prompts to choose between the three stores. The third store entry is not present on any of...

7AI score
SaveExploits0
NVD
NVD
•added 2021/04/20 1:15 p.m.•38 views

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8CVSS0.0163EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/04/20 1:15 p.m.•26 views

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8CVSS7.4AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2021/04/20 1:15 p.m.•16 views

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8CVSS8.7AI score0.0163EPSS
SaveExploits0References5
Prion
Prion
•added 2021/04/20 1:15 p.m.•34 views

Improper access control

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

7.5CVSS9.5AI score0.0163EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2021/04/20 12:36 p.m.•4 views

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8CVSS0.0163EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/04/20 12:36 p.m.•39 views

CVE-2021-28793

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8AI score0.0163EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•16 views

Lex Li vscode-restructuredtext 访问控制错误漏洞

Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...

9.8CVSS5.9AI score0.0163EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•6 views

PT-2021-17919

Name of the Vulnerable Software and Affected Versions: vscode-restructuredtext versions prior to 146.0.0 Description: The issue is related to an incorrect access control vulnerability. A crafted project folder could potentially execute arbitrary binaries via a crafted workspace configuration...

9.8CVSS0.0163EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•11 views

CVE-2021-28793: Incorrect Authorization

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...

9.8CVSS6.1AI score0.0163EPSS
SaveExploits0References2
Citrix
Citrix
•added 2021/04/19 12:00 a.m.•19 views

Workspace App for iOS 21.4 Intermittently Crashes While Accessing Device Storage Option in Store Settings

When accessing the "Device Storage" option in Store Settings within Citrix Workspace App for iOS 21.4, you may encounter intermittent crashes of the application...

6.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2021/04/16 10:15 a.m.•38 views

CVE-2021-22539 Code execution in VSCode-bazel via malicious Bazel config files

An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...

8.2CVSS8.4AI score0.0031EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/16 4:15 a.m.•33 views

CVE-2021-31414

The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...

9.8CVSS0.02414EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/04/16 4:15 a.m.•12 views

CVE-2021-31414

The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...

9.8CVSS7.4AI score0.02414EPSS
SaveExploits0References3
CVE
CVE
•added 2021/04/16 3:50 a.m.•106 views

CVE-2021-31414

CVE-2021-31414 affects the vscode-rpm-spec extension for Visual Studio Code (pre-0.3.2). The vulnerability enables remote code execution via a crafted workspace configuration. Multiple connected sources (NVD, Red Hat, OSV, CVE lists) confirm the issue and its impact, but detailed fix information ...

9.8CVSS9.7AI score0.02414EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder