CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2022-21991 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

CVE-2022-21991

CVE-2022-21991 is a remote code execution vulnerability in the Visual Studio Code Remote Development Extension. The provided documents confirm an RCE impact (high severity, CVSS v3.1 base 8.1) with network-based access and no user interaction, but do not specify affected product versions or explo...

Rocky Linux 8 : .NET Core 2.1 (RLSA-2021:3145)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3145 advisory. - .NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-34485 Note that Nessus has not tested for this issue but has instead relied only on t...

Security Updates for Microsoft Visual Studio Products (February 2022)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by a denial of service DoS vulnerability. An unauthenticated, remote attacker can exploit this issue to cause the application to stop responding. Note that Nessus has not tested for this issue but has...

CVE-2022-21991: Undefined Security Weakness

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

Security Update for Visual Studio 2019 (February 2022) (macOS)

The Microsoft Visual Studio 2019 runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerability: - A Denial of Service vulnerability exists in .NET 6.0 and .NET 5.0 when the Kestrel web server processes certain HTTP/2...

Vulnerabilities fixed in Microsoft Developer Tools

Vulnerabilities have been fixed in the Kestrel Web Server and Visual Studio Code. The vulnerabilities allow a malicious party to execute arbitrary code or cause a denial-of-service cause. The Denial-of-Service vulnerability with reference CVE-2022-21986 is located in the Kestrel web server. This...

Kestrel Web Server input validation error vulnerability

Kestrel Web Server is a cross-platform web server for ASP.NET Core. An input validation error vulnerability exists in Kestrel Web Server. The following products and releases are affected:Microsoft Visual Studio 2019 version 16.9 includes 16.0 - 16.8,Microsoft Visual Studio 2019 version 16.11...

Microsoft Visual Studio Code code injection vulnerability

A code injection vulnerability exists in Microsoft Visual Studio Code, an open source code editor from Microsoft Corporation. The vulnerability stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker...

KLA12453 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code Remote Development...

Security Update for Microsoft Visual Studio Code (February 2022)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.64.1. It is, therefore, affected by a remote code execution vulnerability in the bundled Remote Development extension. Note that Nessus has not tested for these issues but has instead relied only on the...

Security update deployment information: February 8, 2022 (KB5010644)

None None...

PT-2022-1889 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing a remote attacker to conduct spoofing attacks. Recommendations: At the moment,...

Microsoft Visual Studio Spear Phishing

The vulnerability of Microsoft Visual Studio software relates to errors in information representation at the user interface level. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using specially crafted requests...

CVE-2021-32039

Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...

PT-2022-10063 · Mongodb · Mongodb Extension For Vs Code

Name of the Vulnerable Software and Affected Versions: MongoDB Extension for VS Code versions prior to 0.7.0 Description: The issue allows users with appropriate file access to obtain unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials can be us...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: February 8, 2022 (KB5011164)

None None...

Lack of slippage checks during swap

Handle ye0lde Vulnerability details Impact Since the code does not use a minimum return value for swaps it is susceptible to sandwich attacks. More information here: Proof of Concept Here the code Calls Curve to convert the existing underlying balance into UST: / Calls Curve to convert the existi...