10326 matches found
Security Updates for Microsoft Visual Studio Products (October 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET Denial of Service Vulnerability in System.Security.Cryptography.Cose, System.IO.Packaging, System.Runtime.Caching CVE-2024-43483 - .NET Denial of Service...
ABB Cylon Aspect 3.08.00 dialupSwitch.php Remote Code Execution Vulnerability
ABB Cylon Aspect version 3.08.00 suffers from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through the MODEM HTTP POST parameter called by the dialupSwitch.php script. ABB Cylon Aspect 3.08.00 dialupSwitch.php Remote Cod...
ABB Cylon Aspect 3.07.02 sshUpdate.php Unauthenticated Remote SSH Service Control
ABB Cylon Aspect 3.07.02 sshUpdate.php Unauthenticated Remote SSH Service Control Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.02 Summary: ASPECT is an award-winning scalable building...
Security Update for Microsoft Visual Studio Code (October 2024)
The version of Microsoft Visual Studio Code installed on the remote Linux host is prior to 1.94.1. It is, therefore, affected by a remote code execution vulnerability. A remote attacker can use this to execute arbitrary commands. Note that Nessus has not tested for this issue but has instead reli...
ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Directory Traversal
ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Directory Traversal Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...
ABB Cylon Aspect 3.08.01 (persistenceManagerAjax.php) Directory Traversal
Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The BMS/BAS controller has a directory traversal vulnerability that c...
CVE-2024-43610
CVE-2024-43610 concerns an information disclosure in Microsoft Copilot Studio. The connected PT-2024-7988 entry identifies Copilot Studio as the affected software and states that the vulnerability involves exposure of sensitive information to unauthorized actors via a network attack vector, explo...
CVE-2024-43610 Copilot Studio Information Disclosure Vulnerability
...
CVE-2024-43610 Copilot Studio Information Disclosure Vulnerability
...
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person could exploit the vulnerabilities to cause a Denial-of-Service, grant themselves elevated privileges or execute arbitrary code with the victim's privileges. Successful exploitation requires the malicious party to...
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...
CVE-2024-43603
Visual Studio Collector Service Denial of Service Vulnerability...
CVE-2024-43603
Visual Studio Collector Service Denial of Service Vulnerability...
CVE-2024-43601
Visual Studio Code for Linux Remote Code Execution Vulnerability...
CVE-2024-43601
Visual Studio Code for Linux Remote Code Execution Vulnerability...
CVE-2024-43488
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...
CVE-2024-43488
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...