Lucene search
K

285 matches found

Symantec
Symantec
added 2019/05/14 12:0 a.m.47 views

Microsoft Azure DevOps Server and Team Foundation Server Cross Site Scripting Vulnerability

Description Microsoft Azure DevOps Server and Team Foundation Server are prone to an cross-site scripting vulnerability because they fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

7.3AI score
Exploits0Affected Software2
Symantec
Symantec
added 2019/05/14 12:0 a.m.39 views

Microsoft Azure DevOps Server and Team Foundation Server Cross Site Scripting Vulnerability

Description Microsoft Azure DevOps Server and Team Foundation Server are prone to an cross-site scripting vulnerability because they fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

7.3AI score
Exploits0Affected Software2
Kaspersky
Kaspersky
added 2019/05/14 12:0 a.m.69 views

KLA11485 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A deni...

9CVSS8.8AI score0.13117EPSS
Exploits0References41
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.00875EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerabilities of Azure DevOps Server and Team Foundation Server allow attackers to perform cross-site scripting attacks.

The vulnerability of Azure DevOps Server and Team Foundation Server lies in the lack of measures for input sanitization. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

6.1CVSS6.3AI score0.00875EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.1 views

The vulnerability of the Azure DevOps Server software development tools’ setup exists due to the lack of measures taken to neutralize specific elements. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server software development tools exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially...

6.1CVSS6.6AI score0.00909EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability of the Azure DevOps Server software development tools’ setup arises from insufficient validation of input data. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Azure DevOps Server software development tools exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of protected information by sending specially crafted payloads ...

6.5CVSS6.7AI score0.16381EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.1 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.00661EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.00875EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability of the Azure DevOps Server software lies in the insufficient verification of access rights to projects, which allows a malicious individual to increase their privileges.

The vulnerability of the Azure DevOps Server development tool is related to insufficient verification of access rights to projects. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

7.5CVSS7.1AI score0.019EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability of the Azure DevOps Server software lies in the lack of measures for cleaning input data, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Azure DevOps Server lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.3AI score0.00831EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.0 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.00875EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server Cross-Site Scripting Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server 2019, whi...

6.1CVSS6.3AI score0.00831EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09616)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

6.1CVSS6.2AI score0.00875EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

6.1CVSS6.2AI score0.00661EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09614)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

6.1CVSS6.2AI score0.00875EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server Elevation of Privilege Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. An elevation of privilege vulnerability exists in Microsoft Azure DevOps Server 2019,...

7.5CVSS6.9AI score0.019EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09617)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

6.1CVSS6.2AI score0.00875EPSS
Exploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.2 views

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09615)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

6.1CVSS6.2AI score0.00875EPSS
Exploits0References1
OSV
OSV
added 2019/04/09 9:29 p.m.0 views

CVE-2019-0875

An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'...

7.5CVSS7.1AI score0.019EPSS
Exploits0References1
Rows per page
Query Builder