PT-2024-7146

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.9 .NET versions prior to 6.0.34 .NET Framework affected versions not specified Visual Studio affected versions not specified Description The issue is related to algorithmic complexity in the .NET platform, .NET...

PT-2024-7346

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in the .NET and Visual Studio software platform. This vulnerability can be exploited by a remote attacker to...

KLA73906 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual C++...

PT-2024-7347

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to algorithmic complexity in the .NET and Visual Studio platform, which can be exploited by a remote attacker to cause a denial of service...

CVE-2024-47348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through = 7.6.4...

CVE-2024-47348 WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.4...

PT-2024-32563 · Unknown · Yellowpencil Visual Css Style Editor

Name of the Vulnerable Software and Affected Versions: YellowPencil Visual CSS Style Editor versions n/a through 7.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. A...

CVE-2024-47348: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through = 7.6.4...

CVE-2024-9145

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145

The CVE-2024-9145 issue affects Wiz Code Visual Studio Code extension versions 1.0.0–1.5.3 and Wiz (legacy) Visual Studio Code extension versions 0.13.0–0.17.8. When a user opens a maliciously crafted Dockerfile located in a path marked as a “trusted folder” in Visual Studio Code and initiates a ...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

Wiz Code和Wiz (legacy) 安全漏洞

Wiz Code and Wiz legacy are both a Visual Studio Code extension from Wiz, Inc. A security vulnerability exists in Wiz Code versions 1.0.0 through 1.5.3 and Wiz legacy versions 0.13.0 through 0.17.8, which stems from vulnerability to local command injection attacks...

CVE-2024-9145: Improper Neutralization of Special Elements used in a Command

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses Werkzeug-2.2.3-py3-none-any.whl which is vulnerable to this CVE-2023-46136

Summary Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses Werkzeug-2.2.3-py3-none-any.whl which is vulnerable to this CVE-2023-46136 Vulnerability Details CVEID:CVE-2023-46136 DESCRIPTION: Pallets Werkzeug is vulnerable to a denial of service, caused by a...

ROS-20240923-02

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

PT-2024-6333 · Rockwell Automation · Rslogix 5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation RSLogix 5 affected versions not specified Description: A feature in the affected products enables users to prepare a project file with an embedded VBA script and can be configured to run once the project file has been open...

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-8047

The Visual Sound (old) WordPress plugin, v1.06 and earlier, is disclosed as lacking CSRF protection when updating settings. This enables CSRF-based changes by an attacker with a logged‑in admin account. The exact patch version is not provided in the supplied documents; remediation is to upgrade t...