390 matches found
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Server side request forgery (ssrf)
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
The connected sources confirm a vulnerability in vscode-xml prior to version 0.19.0 where downloading a schema can trigger blind SSRF or DoS via a large file. Affected component is the vscode-xml schema download/processing path; root cause is improper handling of externally downloaded schema data...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Red Hat Vscode-Xml 代码问题漏洞
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. A code issue vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in vcode -xml in versions prior to 0.19.0. An attacker could exploit this vulnerabilit...
Red Hat Vscode-Xml 信息泄露漏洞
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. An information disclosure vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in versions of LemMinX prior to 0.19.0. An attacker could use this...
MongoDb For Vs Code 安全漏洞
MongoDb For Vs Code is for connecting to MongoDb and Atlas directly from a Vs Code environment, navigating databases and collections, examining the architecture and prototyping queries and aggregations using Playground. A security vulnerability in MongoDb For Vs Code, which arises from a user wit...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The CVE-2021-30124 issue affects the vscode-phpmd (PHP Mess Detector) extension for Visual Studio Code, specifically versions 1.3.0 and earlier. The root cause is a crafted phpmd.command value within a workspace folder that enables remote code execution. This results in arbitrary code execution w...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
Malicious Package
Overview vscode-npm-script is a malicious package. It uses a preinstall script to steal environment variables. Remediation Avoid using all malicious instances of the vscode-npm-script package. Credit: Snyk Research...
PT-2021-18615 · Unknown · Vscode-Phpmd
Name of the Vulnerable Software and Affected Versions: vscode-phpmd extension version 1.3.0 and earlier Description: The issue allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder. Recommendations: For versions prior to 1.3.0, update to version...
CVE-2021-31938
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
CVE-2021-31938
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
CVE-2021-31938
The CVE-2021-31938 entry concerns Elevation of Privilege in the Microsoft Visual Studio Code Kubernetes Tools Extension. Affected component: the VS Code Kubernetes Tools Extension; issue arises from how the extension handles inputs (per Nessus plugin: prior to version 1.3.3, exploited by opening ...