825 matches found
Microsoft Visual Studio 代码注入漏洞
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle.Git for Visual Studio is one of the Git Distributed Version Control Git for Visual Studio i...
Security Update for Microsoft Visual Studio Code JSHint Extension (August 2020)
A remote code execution vulnerability exists in Visual Studio Code JSHint Extension. An unauthenticated, local attacker can exploit this to bypass authentication and execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Security Updates for Microsoft Visual Studio Products (November 2020)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a tampering vulnerability. The vulnerability exists when the Python Tools for Visual Studio creates the python27 folder. An attacker who successfully exploited this vulnerability could run processe...
The vulnerability of the Python extension in the Microsoft Visual Studio software development environment allows a hacker to execute arbitrary code.
The vulnerability of the Python extension in the Microsoft Visual Studio development environment is related to the possibility of code injection. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Security Update for Microsoft Visual Studio Code (CVE-2020-17023)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.50.1. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file...
The vulnerability of the Microsoft Visual Studio software, related to errors in processing input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software relates to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Visual Studio software, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...
Microsoft Visual Studio DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020
None None...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020
None None...
Security Update for Microsoft Visual Studio Code (CVE-2020-16881)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.48.2. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file...
Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020
Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020 Note This security update applies to Visual Studio 2012 Update 5 except for Visual Studio Isolated and Integrated Shells, Build Tools, Remote Tools, and Express for Web. Summary A remote code execution...
Security Updates for Microsoft Visual Studio Products (August 2020)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by a denial-of-service vulnerability: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...
Security Update for Microsoft Visual Studio Code Maven Extension (August 2020)
An input-validation flaw exists in Visual Studio Code Maven Extension related to processing environment variables after opening a project that allows remote code execution. An attacker can convince a user to clone a specified repository and to open it in Visual Studio Code leading to code...
The vulnerability of Microsoft Visual Studio, a software development tool, and Visual Studio Code, a code editor, stems from deficiencies in access control. These flaws allow attackers to escalate their privileges and execute arbitrary code.
The vulnerability of Microsoft Visual Studio, a software development tool, and Visual Studio Code, a code editor, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: July 14, 2020
None None...
Security Updates for Microsoft Visual Studio Products (July 2020)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Visual Studio when the software fails to check the source markup of XML file input. An attacker who successfully exploited...