Lucene search
K

1325 matches found

CNNVD
CNNVD
added 2023/12/29 12:0 a.m.2 views

Microsoft Visual Studio Code Security Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

7.8CVSS6.8AI score0.00749EPSS
Exploits0References2
NVD
NVD
added 2023/11/28 10:15 p.m.16 views

CVE-2023-46944

An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...

7.8CVSS0.032EPSS
Exploits4References2
ATTACKERKB
ATTACKERKB
added 2023/11/28 10:15 p.m.0 views

CVE-2023-46944

An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...

7.8CVSS6.2AI score0.032EPSS
Exploits4References4
CNNVD
CNNVD
added 2023/11/28 12:0 a.m.1 views

GitLens Security Breach

GitLens is a feature-enhancing plugin for VSCode. A security vulnerability exists in versions prior to GitLens v.14.0.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via a crafted file...

7.8CVSS7.6AI score0.032EPSS
Exploits4References2
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.1 views

The vulnerability of Visual Studio Code’s source editor is related to inadequate control over code generation, allowing attackers to execute arbitrary code.

The vulnerability of the Visual Studio Coded source editor is related to inadequate control over code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01492EPSS
Exploits0References3Affected Software2
Redos
Redos
added 2023/11/21 12:0 a.m.36 views

ROS-20231115-04

Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...

7.8CVSS7.8AI score0.63197EPSS
Exploits3
Code423n4
Code423n4
added 2023/11/17 12:0 a.m.9 views

Sandwich attack on buy()

Lines of code Vulnerability details Impact Function Market:buy does not check or take in a minimum buy amount. This makes users' funds vulnerable to sandwich attacks. buy will increase shareDataid.tokenCount, and thus change the exchange rate of share price. price, fee =...

7.1AI score
Exploits0
NVD
NVD
added 2023/11/14 6:15 p.m.17 views

CVE-2023-36018

Visual Studio Code Jupyter Extension Spoofing Vulnerability...

9.8CVSS0.01606EPSS
Exploits0References1
OSV
OSV
added 2023/11/14 6:15 p.m.21 views

CVE-2023-36018

Visual Studio Code Jupyter Extension Spoofing Vulnerability...

9.8CVSS7AI score0.01606EPSS
Exploits0References1
Prion
Prion
added 2023/11/14 6:15 p.m.14 views

Spoofing

Visual Studio Code Jupyter Extension Spoofing Vulnerability...

7.5CVSS7.2AI score0.01606EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/14 5:57 p.m.18 views

CVE-2023-36018 Visual Studio Code Jupyter Extension Spoofing Vulnerability

...

7.8CVSS6.8AI score0.01606EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/14 5:57 p.m.22 views

CVE-2023-36018 Visual Studio Code Jupyter Extension Spoofing Vulnerability

...

7.8CVSS9.7AI score0.01606EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 5:57 p.m.150 views

CVE-2023-36018

CVE-2023-36018 targets the Visual Studio Code Jupyter Extension and is described as a spoofing vulnerability that can allow an attacker to impersonate the user interface. The connected sources frame this as a UI spoofing issue (Visual Studio Code Jupyter Extension) with high impact, aligning with...

9.8CVSS8.7AI score0.01606EPSS
Exploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2023/11/14 8:0 a.m.29 views

Visual Studio Code Jupyter Extension Spoofing Vulnerability

...

9.8CVSS7.3AI score0.01606EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/11/14 12:0 a.m.90 views

Security Update for Microsoft Visual Studio Code (November 2023)

A Jupyter extension spoofing vulnerability exists in Visual Studio Code when the installed Jupyter extension is prior to 2023.10.1100000000. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 Tenable,...

9.8CVSS8.4AI score0.01606EPSS
Exploits0References4
NCSC
NCSC
added 2023/11/14 12:0 a.m.4 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party could exploit the vulnerabilities to cause a denial-of-service, bypass a security measure, bypass, grant himself elevated privileges or impersonate impersonate another user. Successful exploitation requires the...

9.8CVSS7.6AI score0.08749EPSS
Exploits0
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.3 views

Microsoft Visual Studio Code Security Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. An attacker exploits the vulnerability to perform spoofing attacks...

9.8CVSS7AI score0.01606EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.2 views

The vulnerability of Visual Studio Code’s source editor, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8.1AI score0.00247EPSS
Exploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/09/13 12:0 a.m.54 views

Security Update for Microsoft Visual Studio Code (September 2023)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.82.1. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not...

7.8CVSS8.6AI score0.00247EPSS
Exploits0References5
NVD
NVD
added 2023/09/12 5:15 p.m.22 views

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability...

7.8CVSS7.8AI score0.00247EPSS
Exploits0References1
Rows per page
Query Builder