619 matches found
CVE-2023-38155
PT-2023-5165 reports a vulnerability in Azure DevOps Server and Team Foundation Server related to the deserialization mechanism in MachinePropertyBag, allowing arbitrary code execution and potential local privilege escalation. Affected versions are not specified in the entry. No patch details are...
CVE-2023-33136 Azure DevOps Server Remote Code Execution Vulnerability
...
CVE-2023-33136 Azure DevOps Server Remote Code Execution Vulnerability
...
Azure DevOps Server Remote Code Execution Vulnerability
...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploiti...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploiti...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in components of Azure. A malicious party could exploit the vulnerabilities to gain elevated privileges, execute code with privileges of a user or gain access to sensitive data. Azure DevOps: |----------------|------|-------------------------------------| | CVE...
Microsoft Azure DevOps Server MachinePropertyBag Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Azure DevOps Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2023-5165 · Microsoft · Team Foundation Server +1
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Team Foundation Server affected versions not specified Description: The vulnerability is related to the deserialization mechanism in Azure DevOps Server, specifically in the MachinePropertyB...
PT-2023-5092 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker using specially crafted data to execute arbitrary code...
CVE-2023-38155: Deserialization of Untrusted Data
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-33136: Improper Neutralization of Special Elements used in a Command
Azure DevOps Server Remote Code Execution Vulnerability...
KLA60561 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio can be...
Microsoft Azure DevOps Server Spoofing Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. The Microsoft Azure DevOps Server spoofing vulnerability can be exploited by attackers...
Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (August 2023)
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by a server spoofing vulnerability. An attacker who successfully exploited the vulnerability would have to send the victim a malicious link that the victim would have to click for ...
CVE-2023-36869
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-36869
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-36869
Azure DevOps Server Spoofing Vulnerability...
