328 matches found
CVE-2023-21751: Improper Access Control
Azure DevOps Server Spoofing Vulnerability...
KLA62432 SUI vulnerability in Microsoft Developer Tools
A spoofing vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-21751 Exploitation Related products Microsoft-Azure CVE list CVE-2023-21751 high KB list Solution Install necessary updates from th...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploits...
CVE-2023-36437
Azure DevOps Server Remote Code Execution Vulnerability...
Remote code execution
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-36437: Improper Control of Generation of Code
Azure DevOps Server Remote Code Execution Vulnerability...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploiti...
PT-2023-25573 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to a remote code execution vulnerability. No further details are provided about the estimated number of potentially affected devices worldwide or real-world...
CVE-2023-36561
Azure DevOps Server Elevation of Privilege Vulnerability...
KLA61353 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in HTTP/2 protocol can be exploited remotely to cause...
PT-2023-9192 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient access control in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment...
CVE-2023-36561: Improper Access Control
Azure DevOps Server Elevation of Privilege Vulnerability...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker can...
KLA61357 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Identity SDK can be exploited remotely to execute...
The vulnerability of the MachinePropertyBag class in the Azure DevOps Server software allows a hacker to execute arbitrary code.
The vulnerability of the MachinePropertyBag class in the Azure DevOps Server development tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially created data...
CVE-2023-38155
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-33136
Azure DevOps Server Remote Code Execution Vulnerability...
PT-2023-5165 · Microsoft · Team Foundation Server +1
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Team Foundation Server affected versions not specified Description: The vulnerability is related to the deserialization mechanism in Azure DevOps Server, specifically in the MachinePropertyB...