10287 matches found
CVE-2025-34300
Sawtooth Software Lighthouse Studio
PT-2025-29885 · Unknown · Videocharge Studio
Name of the Vulnerable Software and Affected Versions: VideoCharge Studio version 2.12.3.685 Description: A stack-based buffer overflow exists when processing a specially crafted .VSC configuration file. The issue is due to improper handling of user-supplied data in the XML Name attribute, leadin...
Template Injection Vulnerability in Sawtooth Software's Lighthouse Studio (CVE-2025-34300)
This module exploits a template injection vulnerability in the Sawtooth Software Lighthouse Studio's ciwweb.pl web application. The application fails to properly sanitize user input within survey templates, allowing unauthenticated attackers to inject and execute arbitrary Perl commands on the...
VideoCharge Studio 安全漏洞
VideoCharge Studio is a desktop video optimization application from VideoCharge, Inc. A security vulnerability exists in VideoCharge Studio version 2.12.3.685, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...
Sawtooth Lighthouse Studio 安全漏洞
Sawtooth Lighthouse Studio is a federated analytics platform from Sawtooth USA. A security vulnerability exists in Sawtooth Lighthouse Studio versions prior to 9.16.14 that stems from template injection and could lead to the execution of arbitrary commands...
The vulnerability of the Microsoft Visual Studio software development tool lies in the improper definition of symbolic links before accessing a file, which allows an attacker to exploit their privileges.
The vulnerability of the Microsoft Visual Studio software relates to the improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
PT-2025-29396 · Omron · Machine Automation Controller Nj Series +1
Name of the Vulnerable Software and Affected Versions: NJ/NX-series Machine Automation Controllers affected versions not specified Sysmac Studio Software affected versions not specified Description: A least privilege violation exists in the communication function between the NJ/NX-series Machine...
Omron Sysmac Studio和Omron NJ/NX-series Machine Automation Controllers 安全漏洞
Omron Sysmac Studio and Omron NJ/NX-series Machine Automation Controllers are both products of Omron Japan.Omron Sysmac Studio is a unique environment that integrates logic, motion and drives, robotics, safety, visualization, sensing and information technology into one project. , sensing, and...
BIT-DOTNET-SDK-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
BIT-DOTNET-SDK-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
BIT-DOTNET-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
BIT-DOTNET-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
Security Updates for Microsoft Visual Studio Products (July 2025)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities. - Vulnerability in Gitk where when a user clones an untrusted repository and runs Gitk without additional command arguments, any writable file can be created and truncated. T...
CVE-2025-49739
Improper link resolution before file access 'link following' in Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-49714
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally...
Malicious code in k6-studio-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BIT-ASPNET-CORE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Vulnerabilities fixed in Microsoft Visual Studio
Microsoft has fixed vulnerabilities in Visual Studio. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges, or execute arbitrary code. Some of the vulnerabilities were previously fixed in the code of several open source projects related to GIT. Visual Studi...