Lucene search
+L

6065 matches found

Cvelist
Cvelist
•added 2025/03/11 4:59 p.m.•56 views

CVE-2025-24998 Visual Studio Elevation of Privilege Vulnerability

...

7.3CVSS0.00456EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 4:59 p.m.•123 views

CVE-2025-24998

CVE-2025-24998 is an Elevation of Privilege vulnerability in Visual Studio caused by an Uncontrolled search path element. A local attacker with low privileges and user interaction can potentially escalate to higher privileges. CVSSv3 base score 7.3 (HIGH); impact on confidentiality, integrity, an...

7.3CVSS7.2AI score0.00456EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2025/03/11 4:59 p.m.•56 views

CVE-2025-25003 Visual Studio Elevation of Privilege Vulnerability

...

7.3CVSS0.00456EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 4:59 p.m.•120 views

CVE-2025-25003

CVE-2025-25003 affects Visual Studio and is described as an Elevation of Privilege vulnerability caused by an Uncontrolled search path element. The CVE entry indicates local privilege escalation with high impact; exploitation details are not provided in the documents. Microsoft has published upda...

7.3CVSS7.2AI score0.00456EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2025/03/11 4:58 p.m.•221 views

CVE-2025-24070

The CVE describes a weak authentication issue in ASP.NET Core and Visual Studio that could allow elevation of privilege via calls to RefreshSignInAsync with an improperly authenticated user parameter. Affected software includes ASP.NET Core apps using Microsoft.AspNetCore.Identity (affected versi...

7CVSS6.9AI score0.01004EPSS
SaveExploits1References2Affected Software2
Vulnrichment
Vulnrichment
•added 2025/03/11 4:58 p.m.•26 views

CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

...

7CVSS6.9AI score0.01004EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/11 4:58 p.m.•53 views

CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

...

7CVSS0.01004EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2025/03/11 4:58 p.m.•21 views

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

7CVSS6.9AI score0.01004EPSS
SaveExploits1
Mend
Mend
•added 2025/03/11 4:58 p.m.•4 views

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

8.3CVSS0.01004EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•44 views

Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS7AI score0.00456EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•35 views

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

7CVSS7.1AI score0.01004EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•127 views

Visual Studio Code Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

7.3CVSS7.1AI score0.00575EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•62 views

Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS7AI score0.00456EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

Microsoft Visual Studio 代码问题漏洞

Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A code issue vulnerability exists in Microsoft Visual Studio. An attacker could...

7.3CVSS8.3AI score0.00456EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•10 views

PT-2025-10815

Name of the Vulnerable Software and Affected Versions: ASP.NET Core versions prior to 9.0.3 ASP.NET Core versions prior to 8.0.14 ASP.NET Core versions prior to 6.0.37 Description: A vulnerability exists in ASP.NET Core applications calling RefreshSignInAsync with an improperly authenticated user...

7CVSS8AI score0.01004EPSS
SaveExploits1References56
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-25003: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS7.2AI score0.00456EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•6 views

PT-2025-10842 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an uncontrolled search path element in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

7.3CVSS7.1AI score0.00456EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•2 views

PT-2025-10841

Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description The issue is related to an uncontrolled search path element in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

7.3CVSS0.00456EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-24998: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS7.2AI score0.00456EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•2 views

CVE-2025-24070: Weak Authentication

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

7CVSS7.1AI score0.01004EPSS
SaveExploits1References1
Rows per page
Query Builder