PT-2023-3568 · Microsoft +7 · Visual Studio +8

Name of the Vulnerable Software and Affected Versions: ASP.NET and Visual Studio affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the .NET platform and Microsoft Visual Studio. This can allow a remote attacker to bypass...

Security Update for Microsoft Visual Studio Code GitHub Pull Requests and Isssues Extension (July 2023)

The Microsoft Visual Studio Code GitHub Pull Requests and Issues Extension is prior to version 0.66.2. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person with access to the development environment can exploit the vulnerabilities to exploit attacks that could lead to the following categories of damage: Bypassing security measure. Remote code execution User rights...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. An attacker exploiting the vulnerability can remotely execute code...

Microsoft ASP.NET 和 Visual Studio 竞争条件问题漏洞

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

PT-2023-3989 · Microsoft · Visual Studio Code Github Pull Requests/Issues Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code GitHub Pull Requests and Issues Extension affected versions not specified Description: The issue is related to errors in processing input data in the Visual Studio Code GitHub Pull Requests and Issues Extension. Exploitatio...

snyk Code Injection vulnerability

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application...

GHSA-4VRV-93C7-M92J snyk Code Injection vulnerability

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application...

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2020-22152

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

CVE-2020-22152

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

Cross site scripting

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function...

编号撤回

OBS Studio is an OBS Project open source software designed for efficiently capturing, compositing, encoding, recording and streaming video content. This CVE number has been withdrawn...

Path Traversal

studio-42/elfinder is vulnerable to Path Traversal. The vulnerability exists due to a lack of validation in the supplied request parameters of elFinderVolumeLocalFileSystem.class.php. which allows an attacker to access and write to the local file system...

Vulnerabilities of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allow attackers to trigger service failures.

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, are related to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, related to deficiencies in access control, allow attackers to escalate their privileges.

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework, .NET, and the Microsoft Visual Studio development tools are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

schillerdesignstudio.ro Cross Site Scripting vulnerability OBB-3468172

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP. Hello everyone! This episode will be about Microsoft Patch Tuesday for June 2023, including vulnerabilities that were added between May and June Patch Tuesdays. Alternative...

The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform allows attackers to enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...