390 matches found
CVE-2021-31414
The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...
CVE-2021-31414
The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...
CVE-2021-31414
The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...
CVE-2021-31414
CVE-2021-31414 affects the vscode-rpm-spec extension for Visual Studio Code (pre-0.3.2). The vulnerability enables remote code execution via a crafted workspace configuration. Multiple connected sources (NVD, Red Hat, OSV, CVE lists) confirm the issue and its impact, but detailed fix information ...
PT-2021-15132 · Unknown · Vscode-Bazel
Name of the Vulnerable Software and Affected Versions: vscode-bazel versions prior to 0.4.1 Description: An attacker can place a crafted JSON config file into the project folder, pointing to a custom executable, allowing the execution of any executable on the system through vscode-bazel. This is...
Philipp Wollermann VScode-bazel 安全漏洞
Philipp Wollermann vscode-bazel is a Philipp Wollermann open source application. Bazel plugin for Visual Studio Code. A security vulnerability exists in versions prior to VScode-bazel 0.4.1, which can be exploited by attackers to execute any executable file on a system via vscode-bazel...
CVE-2021-22539
An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...
Swissknife - Scriptable VSCode Extension To Generate Or Manipulate Data. Stop Pasting Sensitive Data In Webpag
The developers swissknife. Do conversions and generations right out of vs code. Extendable with user scripts Available in the Visual Studio Marketplace Currently available scripts Base64 decode Base64 encode Binary To Text Bip39 Mnemonic CSV to Markdown Count characters Count words Crypto currenc...
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
vscode-glsllint 安全漏洞
vscode-glsllint is an unofficial VSCode extension for open source. The extension supports lint's GLS OpenGL Shading Language. It uses the OpenGL and OpenGL ES shader validators to validate each shader type supported by glslangValidator. A security vulnerability exists in vscode-glsllint versions...
vscode-rufo code execution vulnerability
vscode-rufo is a Visual Studio code through Rufo provides formatting extensions to the application. A code execution vulnerability exists in vscode-rufo in versions prior to 0.0.4, which can be exploited by an attacker to execute arbitrary code on a system...
Code injection
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...
CVE-2021-21420
CVE-2021-21420 affects the vscode-stripe extension for Visual Studio Code. The vulnerability arises when the extension loads an untrusted repository containing malicious settings, allowing an attacker to execute arbitrary code in the context of the current user. The available documentation states...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
Code injection
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
CVE-2021-22195 affects the GitLab VSCode extension (gitlab-vscode-extension) v3.15.0 and earlier. It enables client-side code execution, allowing an attacker to run code on the user’s system. The connected documents corroborate vulnerable component and impact but do not provide exploit steps, spe...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
GitLab gitlab-vscode-extension 代码问题漏洞
Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...