CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

CVE-2024-52555

CVE-2024-52555 affects JetBrains WebStorm prior to 2024.3. Multiple connected sources confirm a code execution vulnerability in Untrusted Project mode via the type definitions installer script. The core issue is the installer script handling untrusted type definitions that can be loaded in Untrus...

JetBrains WebStorm 安全漏洞

JetBrains webstorm is an integrated development environment IDE for JavaScript and TypeScript development. A code execution vulnerability exists in JetBrains webstorm, which originates from installer scripts via type definition, and can be exploited by an attacker to execute code in untrusted...

PT-2024-9030 · Jetbrains · Webstorm

Name of the Vulnerable Software and Affected Versions: JetBrains WebStorm versions prior to 2024.3 Description: The issue in JetBrains WebStorm is related to the Untrusted Project Mode, where a flaw allows the loading of external untrusted data alongside trusted data. This can enable an attacker ...

OS Command Injection in Snyk php plugin

The Snyk php plugin is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects...

CVE-2024-48963

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

CVE-2024-48963

The CVE-2024-48963 entry concerns Snyk CLI prior to 1.1294.0, which is vulnerable to Code Injection when scanning an untrusted PHP project due to improper handling of the current working directory name. The vulnerability is triggered if Snyk test is run inside the untrusted project. Affected comp...

CVE-2024-48964

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning...

PT-2024-33300 · Snyk · Snyk Cli

Name of the Vulnerable Software and Affected Versions: Snyk CLI versions prior to 1.1294.0 Description: The issue is related to Code Injection when scanning an untrusted PHP project. It can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current...

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

CVE-2023-51655

CVE-2023-51655 affects JetBrains IntelliJ IDEA prior to 2023.3.2. A malicious plugin repository specified in the project configuration enables code execution in Untrusted Project mode. Root cause: untrusted repository handling in project config allows executing injected code. Impact: potential ar...

PT-2023-31871 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.2 Description: Code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration. Recommendations: For versions prior to 2023.3.2,...

JetBrains IntelliJ IDEA Security Vulnerability

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.3.2, which stems from a malicious plugin repository specified via the project...

PT-2023-1079 · Schneider Electric · Modicon M580 Cpu +7

Name of the Vulnerable Software and Affected Versions: EcoStruxure Control Expert All Versions EcoStruxure Process Expert All Versions Modicon M340 CPU - part numbers BMXP34 All Versions Modicon M580 CPU - part numbers BMEP and BMEH All Versions Modicon M580 CPU Safety - part numbers BMEP58S and...

CVE-2021-35196

Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load function in settings.py. NOTE: the vendor's position is that the product is not intended for opening an...

Deserialization of untrusted data

DISPUTED Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load function in settings.py. NOTE: the vendor's position is that the product is not intended for...

PT-2021-4272 · Unknown +1 · Manuskript +1

Name of the Vulnerable Software and Affected Versions: Manuskript versions 0.12.0 and earlier Description: The issue is related to insecure deserialization via the pickle.load function in settings.py, allowing remote attackers to execute arbitrary code by crafting a settings.pickle file in a...