Security Bulletin: Host header injection vulnerability in Business Automation Studio in Cloud Pak for Automation (CVE-2021-29872)

Summary Business Automation Studio in IBM Cloud Pak for Automation is vulnerable to a host header injection attack. Vulnerability Details CVEID: CVE-2021-29872 DESCRIPTION: IBM ICP4A - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of...

CVE-2021-34880

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

VulnCheck KEV: CVE-2014-0780

InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: February 8, 2022 (KB5011164)

None None...

Lack of slippage checks during swap

Handle ye0lde Vulnerability details Impact Since the code does not use a minimum return value for swaps it is susceptible to sandwich attacks. More information here: Proof of Concept Here the code Calls Curve to convert the existing underlying balance into UST: / Calls Curve to convert the existi...

Microsoft Windows Explorer Preview Pane Security Bypass Vulnerability

Previewing a WMA/WMV media format on Windows Explorer through its Preview Pane causes embedded URLs to be automatically opened in the default browser without displaying any prompt. Exploit Title: Windows Explorer Preview Pane WMV/WMA media Automatic URI Opening Vulnerability Exploit Author: Eduar...

Security Bulletin: Apache Log4J vulnerability affects IBM Watson Studio Premium Add On in Cloud Pak for Data (CVE-2021-44228)

Summary Apache Log4j, used for logging in IBM Watson Studio Premium Add On in Cloud Pak for Data is impacted by the Apache Log4j vulnerability CVE-2021-44228. Customers are encouraged to take quick action to update their systems. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log...

Security Bulletin: Apache Log4J Vulnerability affects Watson Studio in Cloud Pak for Data (CVE-2021-44228)

Summary Apache Log4j is used for logging in Watson Studio in Cloud Pak for Data is impacted by the Apache Log4j vulnerability CVE-2021-44228. Customers are encouraged to take quick action to update their systems. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a...

Security Updates for Microsoft Visual Studio Products (December 2021)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-43877 Note that Nessus has not tested for this issue but has...

UiPath App Studio Cross-Site Scripting Vulnerability

UiPath App Studio is a low-code application development platform from UiPath, Inc. A cross-site scripting vulnerability exists in version 21.4.4 of UiPath App Studio, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms. This allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

Security Update for Microsoft Visual Studio Code Remote WSL Extension (December 2021)

The Microsoft Visual Studio Code Remote Windows Subsystem for Linux WSL extension is prior to version 0.63.11. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to execute arbitrary code on the system with privileges of the...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...