6819 matches found
CVE-2021-29658: Undefined Security Weakness
The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...
This operation has been cancelled due to restrictions in effect on this computer
When you try to browse to the My Documents folder on a published Windows Explorer application while using Special Folder Redirection, the following error message appears: “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” ...
PT-2021-18387
Name of the Vulnerable Software and Affected Versions vscode-rufo extension versions prior to 0.0.4 Description The issue allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder. This can be exploited when a user opens a specifically designed workspace folder,...
CVE-2021-29642
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...
CVE-2021-29642
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...
CVE-2021-29642: Incorrect Authorization
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...
PT-2021-18379
Name of the Vulnerable Software and Affected Versions GistPad versions prior to 0.2.7 Description The issue allows a crafted workspace folder to change the URL for the Gist API, leading to leakage of GitHub access tokens. Recommendations For versions prior to 0.2.7, update to version 0.2.7 or lat...
Folder Redirection Privilege Escalation
The vulnerability of the Folder Redirection technology in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Path Traversal
github.com/ipfs/go-ipfs is vulnerable to path traversal. The use of whyrusleeping/tar-utils which fails to validate tarPath when a get is done on an malicious DAG file allows overwritting of files or writing to incorrect destination folders during retrieval...
VipNet Client Code Execution
The vulnerability of the VipNet Client information protection software lies in insufficient checks on access rights to the update folder, as well as insufficient checks on the integrity and authenticity of update files. Exploiting this vulnerability could allow an attacker, operating locally, to...
Jenkins Matrix Authorization Strategy Security Vulnerability
Jenkins Matrix Authorization Strategy is a Jenkins open source application plugin . The plug-in in Jenkins to achieve fine-grained access control . An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permissions to nested...
Jenkins Role-based Authorization Strategy: Permissions and Access Control Issues
Jenkins Role-based Authorization Strategy is Jenkins open source an application plugin . The plugin is used to add a new role-based mechanism to manage user rights . A privilege impropriety vulnerability exists in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier versions. An...
CVE-2021-23879
Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...
CVE-2021-23879
Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...
CVE-2021-26887
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
CVE-2021-26887
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
Privilege escalation
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
CVE-2021-26887
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
