10386 matches found
CVE-2021-33900 StartTLS and SASL confidentiality protection bypass
While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism DIGEST-MD5, GSSAPI was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue...
CVE-2021-33900
CVE-2021-33900 affects Apache Directory Studio up to version 2.0.0.v20210213-M16 and earlier. The issue is that StartTLS encryption was not applied for SASL authentication methods (DIGEST-MD5, GSSAPI) and that any configured SASL confidentiality layer was not applied. The stem cause is the encryp...
PT-2021-3958 · Apache · Apache Directory Studio
Name of the Vulnerable Software and Affected Versions: Apache Directory Studio versions prior to 2.0.0.v20210213-M16 Description: The issue is related to the absence of protection for service data. An attacker could exploit this to disclose protected information. The problem arises when configure...
[ASA-202107-34] code: arbitrary code execution
Arch Linux Security Advisory ASA-202107-34 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-31211 CVE-2021-31214 Package : code Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1963 Summary ======= The package co...
Microsoft Visual Studio Code maven.executable.options Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Visual Studio Spoofing Vulnerability (CNVD-2021-54406)
Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34477
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...
CVE-2021-34477
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...
CVE-2021-34479
Microsoft Visual Studio Spoofing Vulnerability...
CVE-2021-34479
Microsoft Visual Studio Spoofing Vulnerability...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
Spoofing
Microsoft Visual Studio Spoofing Vulnerability...
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...