Sophos Endpoint Protection 代码注入漏洞

Sophos Endpoint Protection is a network appliance from Sophos UK. It provides the function of blocking X endpoints. Sophos Endpoint Protection has a security vulnerability that can be exploited by an attacker who can bypass the restrictions of Sophos Endpoint Protection in order to escalate his...

Buffalo WSR-2533DHPL2 代码注入漏洞

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to code injection, which can be exploited by attackers to remotely execute code...

Microsoft Visual Studio Code Execution Vulnerability (CNVD-2021-29879)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. Visual Studio Code code injection vulnerability. No details of the vulnerability are provided at this time...

Microsoft Exchange Server 代码注入漏洞

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...

Microsoft Raw Image Extension 代码注入漏洞

Microsoft Raw Image Extension is a software application from Microsoft. It enables the viewing of thumbnails and metadata for supported raw file formats directly in Windows File Explorer or the viewing of images in the Photos application. A code injection vulnerability exists in Microsoft Raw Ima...

Microsoft Windows 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows and Windows Server have a remote code execution vulnerability that can be exploited by...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in the Microsoft Visual Studio Code Kubernetes Tool Extension, which can be exploited by an attacker to remotely execute code vulnerability...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. A remote attacker can exploit this vulnerability to execute arbitrary code...

GitLab CE/EE Code Injection Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. A code...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...

GE Reason DR60 Code Injection Vulnerability

The Reason DR60 is a centralized, all-in-one multi-function digital fault recorder DFR from GE. A code injection vulnerability exists in GE Reason DR60 firmware prior to version 02A04.1. The vulnerability stems from the software using externally influenced input from an upstream component to...

Microsoft Windows OpenType Font Parsing 代码注入漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A code injection vulnerability exists in Microsoft Windows OpenType Font Parsing. The following products and editions are affected:Windows 10 Version 1803 for ARM64-based Systems,Windows 10...

SAP MII 代码注入漏洞

SAP MII is a software application from SAP Germany. It provides manufacturing operations management functions. SAP MII has a security vulnerability. sapmii allows users to create dashboards via SSCE Self Service Combined Environment and save them as JSPs. an attacker can intercept requests to the...

Code Injection Vulnerability in GX Works2

GX Works2 is a PLC programming software. A code injection vulnerability exists in GX Works2. An attacker can exploit this vulnerability to gain server privileges...

Panasonic Video Insight VMS Code Injection Vulnerability

Panasonic Video Insight VMS is an enterprise surveillance video management system from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Video Insight VMS that could allow a remote attacker to execute arbitrary code on the target system...

SAP Business Warehouse and SAP BW/4HANA Code Injection Vulnerability

SAP Business Warehouse BW is SAP's data warehouse solution.SAP BW provides a high-performance infrastructure that helps you evaluate and interpret data. Decision makers can make informed decisions based on the analyzed data and identify target-specific activities. A code injection vulnerability...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code TS-Lint Extension...

Code Injection Vulnerability in ZDCC VisualField VxDataAnalyzer.exe Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A code injection vulnerability exists in the VisualField VxDataAnalyzer.exe component of ZDCC, which can be exploited by an attacker to cause a denial-of-service...

Code Injection Vulnerability in ZDCC VisualField FFHATool.exe Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A code injection vulnerability exists in the VisualField FFHATool.exe component of ZDCC, which can be exploited by an attacker to cause a denial-of-service attack...