639 matches found
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Red Hat Vscode-Xml information leakage vulnerability
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. An information disclosure vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in versions of LemMinX prior to 0.19.0. An attacker could use this...
PT-2022-13345
Name of the Vulnerable Software and Affected Versions vscode-xml versions prior to 0.19.0 Description A flaw was found in vscode-xml where schema download could lead to blind SSRF or DoS via a large file. Recommendations For versions prior to 0.19.0, update to version 0.19.0 or later to resolve t...
Red Hat Vscode-Xml code-related vulnerabilities
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. A code issue vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in vcode -xml in versions prior to 0.19.0. An attacker could exploit this vulnerabilit...
CVE-2022-0671: Server-Side Request Forgery (SSRF)
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
MongoDB For VS Code security vulnerabilities
MongoDb For Vs Code is for connecting to MongoDb and Atlas directly from a Vs Code environment, navigating databases and collections, examining the architecture and prototyping queries and aggregations using Playground. A security vulnerability in MongoDb For Vs Code, which arises from a user wit...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The CVE-2021-30124 issue affects the vscode-phpmd (PHP Mess Detector) extension for Visual Studio Code, specifically versions 1.3.0 and earlier. The root cause is a crafted phpmd.command value within a workspace folder that enables remote code execution. This results in arbitrary code execution w...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
Malicious Package
Overview vscode-npm-script is a malicious package. It uses a preinstall script to steal environment variables. Remediation Avoid using all malicious instances of the vscode-npm-script package. Credit: Snyk Research...
CVE-2021-30124: Undefined Security Weakness
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
PT-2021-18615 · Unknown · Vscode-Phpmd
Name of the Vulnerable Software and Affected Versions: vscode-phpmd extension version 1.3.0 and earlier Description: The issue allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder. Recommendations: For versions prior to 1.3.0, update to version...
CVE-2021-31938
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
CVE-2021-31938
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...
CVE-2021-31938 Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
...
CVE-2021-31938
The CVE-2021-31938 entry concerns Elevation of Privilege in the Microsoft Visual Studio Code Kubernetes Tools Extension. Affected component: the VS Code Kubernetes Tools Extension; issue arises from how the extension handles inputs (per Nessus plugin: prior to version 1.3.3, exploited by opening ...
