5193 matches found
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in its Developer products. The vulnerabilities allow a malicious party to launch attacks execute attacks that could lead to access to sensitive data, or Denial-of-Service, for example, through services and applications that make use of these vulnerable products...
Microsoft Visual Studio Code Command Injection Vulnerability (CNVD-2021-61415)
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Visual Studio Code versions prior to 1.3.0, which stems from a problem with Visual Studio Code's unofficial vcode -phpmd aka PHP Mess Detector extension. The vulnerability can be...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
Microsoft Visual Studio Code 命令注入漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Visual Studio Code versions prior to 1.3.0, which stems from a problem with Visual Studio Code's unofficial vcode -phpmd aka PHP Mess Detector extension. The vulnerability can be...
CVE-2021-30124
The CVE-2021-30124 issue affects the vscode-phpmd (PHP Mess Detector) extension for Visual Studio Code, specifically versions 1.3.0 and earlier. The root cause is a crafted phpmd.command value within a workspace folder that enables remote code execution. This results in arbitrary code execution w...
[ASA-202107-34] code: arbitrary code execution
Arch Linux Security Advisory ASA-202107-34 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-31211 CVE-2021-31214 Package : code Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1963 Summary ======= The package co...
Microsoft Visual Studio Code maven.executable.options Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Visual Studio Spoofing Vulnerability (CNVD-2021-54406)
Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34477
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...
CVE-2021-34479
Microsoft Visual Studio Spoofing Vulnerability...
CVE-2021-34479
Microsoft Visual Studio Spoofing Vulnerability...
CVE-2021-34477
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...
Spoofing
Microsoft Visual Studio Spoofing Vulnerability...