MAL-2025-2043 Malicious code in jfrog-ide-webview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5d6e0e1d12832d536ffbef3fcdf804ce0d82ff5bd24ff1117b3e988d14152b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2008-7271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attacker...

Linux Distros Unpatched Vulnerability : CVE-2010-4647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to...

BIT-GITLAB-2024-10383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1 and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6, where a XSS attack was...

The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the ETW Host Service at the kernel and application level, related to improper process management, allow attackers to gain elevated privileges.

The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the kernel-level and application-level Event Tracking Service Host Service are related to...

CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

UBUNTU-CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2024-10383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2024-10383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2024-10383

The CVE-2024-10383 entry concerns the gitlab-web-ide-vscode-fork component distributed over CDN. Affected versions include all prior to 1.89.1-1.0.0-dev-20241118094343 and used by GitLab CE/EE from 15.11 up to 17.3, with temporary impact on 17.4–17.6. The issue is described as a Cross-Site Script...

PT-2025-5974 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 17.3 GitLab CE/EE versions 17.4, 17.5, and 17.6 gitlab-web-ide-vscode-fork versions prior to 1.89.1-1.0.0-dev-20241118094343 Description: An issue has been discovered in the gitlab-web-ide-vscode-fork component,...

CVE-2024-10383: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2021-31428

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

The vulnerability of the cloud integrated development environment (IDE) Atheos lies in the lack of file loading restrictions, which allows attackers to read, modify, or execute any files on the server.

The vulnerability of the cloud integrated development environment IDE Atheos relates to the absence of file loading restrictions. Exploiting this vulnerability allows a malicious actor to remotely read, modify, or execute any files on the server...

CVE-2024-9490

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-48645

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...

Malicious code in blynk-ide (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87b8ecd5d02a552747321d52fd162a15432bc2afa8976448f1fbb620ba818180 Any computer that has this package installed or running should be considered...

MAL-2025-1025 Malicious code in blynk-ide (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87b8ecd5d02a552747321d52fd162a15432bc2afa8976448f1fbb620ba818180 Any computer that has this package installed or running should be considered...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release

Red Hat OpenShift Dev Spaces 3.18 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...