Lucene search
+L

10322 matches found

OSV
OSV
added 2024/10/22 7:09 a.m.19 views

BIT-DOTNET-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

7.5CVSS7.6AI score0.02873EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/22 7:09 a.m.21 views

BIT-DOTNET-SDK-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

7.5CVSS7.6AI score0.02873EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/22 7:09 a.m.17 views

BIT-DOTNET-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

7.5CVSS7.6AI score0.02935EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/22 7:09 a.m.14 views

BIT-DOTNET-SDK-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

7.5CVSS7.6AI score0.02935EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/22 7:08 a.m.22 views

BIT-DOTNET-SDK-2024-43485 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS7.6AI score0.03052EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2024/10/22 12:00 a.m.446 views

ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Command Injection

ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...

7.4AI score
SaveExploits0
zdt
zdt
added 2024/10/22 12:00 a.m.255 views

ABB Cylon Aspect 3.08.01 networkDiagAjax.php Remote Network Utility Execution Vulnerability

ABB Cylon Aspect version 3.08.01 allows an unauthenticated attacker to perform network operations such as ping, traceroute, or nslookup on arbitrary hosts or IPs by sending a crafted GET request to networkDiagAjax.php. This could be exploited to interact with or probe internal or external systems...

7.2AI score
SaveExploits0
Veracode
Veracode
added 2024/10/19 9:09 a.m.8 views

Remote Code Execution (RCE)

.NET and Visual Studio is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling and validation of input or components, which allows an attacker to execute arbitrary code remotely by crafting malicious inputs or exploiting affected features...

8.1CVSS8.3AI score0.02078EPSS
SaveExploits0References9Affected Software13
Malwarebytes
Malwarebytes
added 2024/10/18 4:02 p.m.91 views

Unauthorized data access vulnerability in macOS is detailed by Microsoft

The Microsoft Threat Intelligence team disclosed details about a macOS vulnerability, dubbed "HM Surf," that could allow an attacker to gain access to the user’s data in Safari. The data the attacker could access without users’ consent includes browsed pages, along with the device’s camera,...

5.5CVSS6.5AI score0.0735EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.12 views

The vulnerability of the Visual Studio Code extension for Arduino, a code editor for Visual Studio Code, arises from the lack of authentication for a critical function. This allows a hacker to execute arbitrary code.

The vulnerability of the Visual Studio Code extension for Arduino code editor involves a lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.3AI score0.01148EPSS
SaveExploits0References5Affected Software1
Zero Science Lab
Zero Science Lab
added 2024/10/18 12:00 a.m.325 views

ABB Cylon Aspect 3.08.01 (databaseFileDelete.php) Remote Code Execution

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an unauthenticated OS command...

6.1AI score
SaveExploits0
OSV
OSV
added 2024/10/17 7:11 p.m.16 views

BIT-DOTNET-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

8.1CVSS8.1AI score0.02078EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/17 7:11 p.m.20 views

BIT-DOTNET-SDK-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

8.1CVSS8.1AI score0.02078EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/10/17 12:00 a.m.10 views

Microsoft .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

8.1CVSS7.9AI score0.02078EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:00 a.m.17 views

IBM Watson Studio Local Cross-Site Request Forgery Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from International Business Machines IBM. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A cross-site request forgery vulnerability exists in IBM...

8.8CVSS6.5AI score0.00171EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:00 a.m.25 views

Microsoft Visual Studio Code extension for Arduino remote code execution vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in the Microsoft Visual Studio Code extension for Arduino, which can be exploited by an attacker to execute arbitrary code on a system...

9.8CVSS8.1AI score0.01148EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:00 a.m.8 views

Microsoft .NET and Visual Studio Denial of Service Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

7.5CVSS6.4AI score0.03052EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 12:32 p.m.12 views

Malicious code in autogen_studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5c6d0ae37fec7bcb0a91fd8956a8f6f930e82986d6521df81349ee6a1644d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/10/16 12:15 a.m.9 views

CVE-2024-49340

IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

8.8CVSS5.7AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/16 12:15 a.m.32 views

CVE-2024-49340

IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

8.8CVSS0.00171EPSS
SaveExploits0References1
Rows per page
Query Builder