9911 matches found
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-28471 Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2021-28471 Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-28471
CVE-2021-28471 is a Remote Development Extension for Visual Studio Code remote code execution vulnerability. The NVD/OSV entries rate it HIGH (CVSS v3.1: LOCAL, LOW/LOCAL, UI REQUIRED, C/H/I/H/A/H). The vulnerability affects Visual Studio Code components and related tools (e.g., Remote Developmen...
CVE-2021-28471: Undefined Security Weakness
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
PT-2021-2731 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension Pack for Microsoft Visual Studio Code...
Microsoft Azure Sphere Linux namespace ptrace unsigned code execution vulnerability
Summary An unsigned code execution vulnerability exists in the Linux namespace ptrace functionality of Microsoft Azure Sphere 21.01. Specially crafted shellcode could allow an adversary to execute unsigned code. An attacker can change the namespace and use ptrace to modify the code of a running...
Debian DLA-2622-1 : python-django security update
It was discovered that there was a potential directory traversal issue in Django, a Python-based web development framework. The vulnerability could have been exploited by maliciously crafted filenames. However, the upload handlers built into Django itself were not affected. For Debian 9 'Stretch'...
Debian: Security Advisory (DLA-2622-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2622-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2622-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 09, 2021 https://wiki.debian.org/LTS -...
Cross-site scripting in actionpack
In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...
GHSA-35MM-CC6R-8FJP Cross-site scripting in actionpack
In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...
CVE-2021-30123
FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...
Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability
Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...
[SECURITY] Fedora 32 Update: atasm-1.09-1.fc32
ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...
[SECURITY] Fedora 33 Update: atasm-1.09-1.fc33
ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...
Wafangdian Gongji Street Kechuang Computer Service Center Station Building System Exists SQL Injection Vulnerability
Wafangdian Gongji Street Section Computer Service Center business scope includes software development, services, computers and consumables, office supplies sales. Wafangdian City Gongji Street Section Computer Service Center building system there is a SQL injection vulnerability, the attacker can...
CVE-2021-22994
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP...