CVE-2023-36897: Improper Input Validation

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

PT-2023-4225

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio versions prior to the fixed version in August 2023 Patch Tuesday Description The issue is related to a Denial of Service DoS vulnerability in .NET and Visual Studio. It can be exploited for DoS attacks with no user...

CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

Microsoft Visual Studio Security Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker cou...

KLA51717 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing...

PT-2023-5505 · Microsoft · Visual Studio Tools For Office Runtime

Name of the Vulnerable Software and Affected Versions: Visual Studio Tools for Office Runtime affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct...

PT-2023-9610

Name of the Vulnerable Software and Affected Versions .NET Core and Visual Studio affected versions not specified Description The issue is related to an uncontrolled consumption of resources, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the moment,...

UBUNTU-CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

PT-2023-4300

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio versions affected versions not specified Microsoft .NET versions affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio and the .NET platform, which...

UBUNTU-CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

PT-2023-4295

Name of the Vulnerable Software and Affected Versions ASP.NET Core SignalR and Visual Studio affected versions not specified Description The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can potential...

CVE-2023-38180: Uncontrolled Resource Consumption

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-35391: Undefined Security Weakness

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

UBUNTU-CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-35390: Improper Neutralization of Special Elements used in a Command

.NET and Visual Studio Remote Code Execution Vulnerability...

Microsoft .NET and Visual Studio Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. NET is a software framework dedicated to agile software development, rapid application development,...

CVE-2023-38695

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

Design/Logic Flaw

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...