10386 matches found
Microsoft Visual Studio Code Code Injection Vulnerability (CNVD-2022-29568)
A code injection vulnerability exists in Microsoft Visual Studio Code, an open source code editor from Microsoft Corporation. The vulnerability stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker...
GHSA-PH76-RHQQ-XJ7J Cross-site scripting in Crafter CMS Crafter Studio
Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting XSS, which allows remote attackers to steal users’ cookies...
Cross-site scripting in Crafter CMS Crafter Studio
Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting XSS, which allows remote attackers to steal users’ cookies...
GHSA-F68H-HFQP-8RMV Path Traversal in Crafter CMS Crafter Studio
Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...
GHSA-7C6Q-JQWC-4423 Path Traversal in Crafter CMS Crafter Studio
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE...
GHSA-WQ3V-3GRQ-6F86 Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...
GHSA-8786-WG74-F522 Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior t...
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior t...
CVE-2022-21991
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
CVE-2022-21991
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
CVE-2022-21991
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
CVE-2022-21991 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
...
CVE-2022-21991
CVE-2022-21991 is a remote code execution vulnerability in the Visual Studio Code Remote Development Extension. The provided documents confirm an RCE impact (high severity, CVSS v3.1 base 8.1) with network-based access and no user interaction, but do not specify affected product versions or explo...
Security Updates for Microsoft Visual Studio Products (February 2022)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by a denial of service DoS vulnerability. An unauthenticated, remote attacker can exploit this issue to cause the application to stop responding. Note that Nessus has not tested for this issue but has...
Rocky Linux 8 : .NET Core 2.1 (RLSA-2021:3145)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3145 advisory. - .NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-34485 Note that Nessus has not tested for this issue but has instead relied only on t...
CVE-2021-45919
Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...
Design/Logic Flaw
Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...
CVE-2021-45919
Studio 42 elFinder versions up to 2.1.31 are affected by a cross-site scripting (XSS) vulnerability involving SVG data handling. The vulnerability stems from insecure handling of SVG document data, enabling client-side code execution. Affected product is elFinder (Studio 42), with the issue docum...
