Lucene search
+L

286 matches found

Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.9 views

PT-2021-2727 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to the failure to protect the web page structure, which can lead to cross-site scripting attacks. A remote attacker can exploit this to conduct such attacks...

6.4CVSS6.4AI score0.02317EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.12 views

Microsoft Azure DevOps Server 信息泄露漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. An information disclosure vulnerability exists in Azure DevOps Server and Team...

6.5CVSS6.6AI score0.02645EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.7 views

Microsoft Azure DevOps Server 跨站脚本漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server. The...

6.1CVSS6.9AI score0.02317EPSS
SaveExploits3References7
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.9 views

PT-2021-2707 · Microsoft · Team Foundation Server +1

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Server affected versions not specified Description: The issue is related to errors in handling objects in memory within the Team Foundation Services component of Azure DevOps Server. This can allow a...

6.8CVSS6.4AI score0.02645EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.9 views

The vulnerabilities of Azure DevOps Server and Team Foundation Server related to improper code generation management allow attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Azure DevOps Server and Team Foundation Server software lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information from a remote location...

5.4CVSS6AI score0.01387EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.6 views

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

5.4CVSS6.5AI score0.01234EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/12/10 12:15 a.m.9 views

CVE-2020-17145

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...

5.4CVSS6.1AI score0.01387EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/10 12:15 a.m.7 views

CVE-2020-17135

Azure DevOps Server Spoofing Vulnerability...

6.4CVSS6.6AI score0.01234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.7 views

PT-2020-5229 · Microsoft · Team Foundation Server +1

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Services affected versions not specified Description: The issue is related to incorrect code generation management in Azure DevOps Server and Team Foundation Server. Exploitation of this issue may allow...

5.4CVSS5.3AI score0.01387EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2020/12/08 12:0 a.m.45 views

Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (December 2020)

The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by multiple spoofing vulnerabilities. An attacker can exploit these to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has...

6.4CVSS6AI score0.01512EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.9 views

Microsoft Azure DevOps Server 输入验证错误漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. No details of the...

6.4CVSS6.6AI score0.01234EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.11 views

Microsoft Azure DevOps Server Input Validation Error Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. An input validation error vulnerability exists in Microsoft Azure DevOps Server. The...

5.4CVSS6AI score0.01387EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2020/12/08 12:0 a.m.47 views

KLA12020 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server can be...

9.4CVSS7.9AI score0.03552EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.8 views

The vulnerability of the Team Foundation Services component of the software development tool Azure DevOps Server, which allows a hacker to manipulate the content of a page.

The vulnerability of the Team Foundation Services component of the Azure DevOps Server development tool is related to a false representation of information on the user interface. Exploiting this vulnerability could allow a malicious actor to manipulate the page content remotely...

7.5CVSS5.8AI score0.01512EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/11 7:15 a.m.8 views

CVE-2020-1325

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...

5.4CVSS6.1AI score0.01512EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2020/11/10 12:0 a.m.36 views

KLA11998 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server and Team Foundation Services can be...

9.3CVSS7AI score0.03551EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.11 views

PT-2020-4827 · Microsoft · Azure Devops Server +1

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Services affected versions not specified Description: The issue is related to a spoofing vulnerability in the Team Foundation Services component of Azure DevOps Server, where the user interface can be...

7.5CVSS5.1AI score0.01512EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:0 a.m.15 views

The vulnerability of Azure DevOps Server lies in the lack of thorough validation of input data, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Azure DevOps Server exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS6.3AI score0.01565EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/07/20 12:0 a.m.8 views

Microsoft Azure DevOps Server Cross-Site Scripting Vulnerability (CNVD-2020-45312)

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server versions...

5.4CVSS6.1AI score0.01565EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.29 views

CVE-2020-1326

A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'...

5.4CVSS0.01565EPSS
SaveExploits0References1
Rows per page
Query Builder