341 matches found
Microsoft Azure DevOps Server security vulnerabilities
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. The following produc...
PT-2023-3135 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks. Recommendations: At the...
Microsoft Azure DevOps Server security vulnerabilities
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. The following produc...
CVE-2023-21569: Improper Control of Generation of Code
Azure DevOps Server Spoofing Vulnerability...
PT-2023-3136 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...
CVE-2023-21565: Improper Neutralization of Input During Web Page Generation
Azure DevOps Server Spoofing Vulnerability...
Code injection
A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to...
Azure DevOps Server Code Execution
The vulnerability of Azure DevOps Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...
CVE-2023-21553
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-21553
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-21564
Azure DevOps Server Cross-Site Scripting Vulnerability...
CVE-2023-21564
Azure DevOps Server Cross-Site Scripting Vulnerability...
CVE-2023-21564
Azure DevOps Server Cross-Site Scripting Vulnerability...
CVE-2023-21553 Azure DevOps Server Remote Code Execution Vulnerability
...
CVE-2023-21564 Azure DevOps Server Cross-Site Scripting Vulnerability
...
Azure DevOps Server Remote Code Execution Vulnerability
...
KLA20235 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server...
CVE-2023-21564: Improper Neutralization of Input During Web Page Generation
Azure DevOps Server Cross-Site Scripting Vulnerability...
PT-2023-1432 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted fil...