Lucene search
+L

10741 matches found

RedhatCVE
RedhatCVE
•added 2025/03/13 7:03 p.m.•24 views

CVE-2025-24998

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS6.7AI score0.00456EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/13 6:44 p.m.•16 views

CVE-2025-26631

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

7.3CVSS6.8AI score0.00575EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/13 5:15 p.m.•25 views

CVE-2025-2080

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products...

9.3CVSS0.00453EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/13 4:57 p.m.•100 views

CVE-2025-2080

The CVE-2025-2080 entry covers Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool (version 3.1.2rc11). The connected sources document two concrete issues: (1) an exposed web management service that could allow an attacker to bypass authentication and gain control o...

9.3CVSS7AI score0.00453EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/13 4:55 p.m.•18 views

CVE-2025-2079 Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

8.7CVSS5.9AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/13 4:55 p.m.•50 views

CVE-2025-2079 Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

8.7CVSS0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/13 12:00 a.m.•19 views

Optigo Networks Visual BACnet Capture Tool和Optigo Visual Networks Capture Tool 安全漏洞

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool are both products of Optigo, Inc.Optigo Networks Visual BACnet Capture Tool is a Optigo Networks Visual BACnet Capture Tool is a tool for capturing BACnet network traffic and automatically uploading the captured da...

9.3CVSS6.9AI score0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/13 12:00 a.m.•12 views

Optigo Networks Visual BACnet Capture Tool和Optigo Visual Networks Capture Tool 安全漏洞

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool are both products of Optigo Inc.Optigo Networks Visual BACnet Capture Tool is a Optigo Networks Visual BACnet Capture Tool is a tool for capturing BACnet network traffic and automatically uploading the captured dat...

8.7CVSS6.6AI score0.00392EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/13 12:00 a.m.•7 views

CVE-2025-2081: Use of Hard-coded, Security-relevant Constants

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients...

8.7CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/13 12:00 a.m.•6 views

CVE-2025-2079: Use of Hard-coded, Security-relevant Constants

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

8.7CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/13 12:00 a.m.•9 views

CVE-2025-2080: Authentication Bypass Using an Alternate Path or Channel

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products...

9.3CVSS5.9AI score0.00453EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/13 12:00 a.m.•20 views

Optigo Networks Visual BACnet Capture Tool和Optigo Visual Networks Capture Tool 安全漏洞

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool are both products of Optigo Inc.Optigo Networks Visual BACnet Capture Tool is a Optigo Networks Visual BACnet Capture Tool is a tool for capturing BACnet network traffic and automatically uploading the captured dat...

8.7CVSS6.6AI score0.00392EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•18 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00456EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•22 views

The vulnerability of Visual Studio Code’s source editor lies in its uncontrolled pathfinding mechanism, which allows attackers to escalate their privileges.

The vulnerability of Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.3CVSS7.9AI score0.00575EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•18 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00456EPSS
SaveExploits0References2Affected Software3
CNVD
CNVD
•added 2025/03/12 12:00 a.m.•27 views

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2025-05245)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

7.3CVSS7AI score0.00456EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 9:15 p.m.•18 views

CVE-2025-2022

Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

7.8CVSS6.2AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 9:15 p.m.•19 views

CVE-2025-2015

Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

7.8CVSS7.5AI score0.00268EPSS
SaveExploits0References1
NCSC
NCSC
•added 2025/03/11 6:44 p.m.•33 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it cannot be ruled out that...

7.7CVSS7.7AI score0.01004EPSS
SaveExploits1
NVD
NVD
•added 2025/03/11 5:16 p.m.•21 views

CVE-2025-26631

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

7.3CVSS0.00575EPSS
SaveExploits0References1
Rows per page
Query Builder