825 matches found
CVE-2020-0884: Cleartext Transmission of Sensitive Information
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'...
Microsoft Visual Studio Spoofing Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A security vulnerability exists in Microsoft Visual Studio. The vulnerability can be exploited by an...
Microsoft Visual Studio Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL. An attacker who successfully exploited this vulnerability could compromise the access tokens, exposing security and privacy risks. To exploit this vulnerability, an attacker would nee...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020
None None...
Security Updates for Microsoft Visual Studio Products (March 2020)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL. An attacker who successfully exploited this vulnerability...
KLA11535 An elevation of privilege vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install...
PT-2019-6383
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, a software development tool. This can be exploited by a remote attacker to execute arbitrary...
Microsoft Visual Studio CVE-2019-1486 Spoofing Vulnerability
Description Microsoft Visual Studio is prone to an security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Visual...
KLA11618 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Git for Visual Studio can be exploited...
PT-2019-6384
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, allowing a remote attacker to execute arbitrary code. Recommendations At the moment, there is...
Security Updates for Microsoft Visual Studio Products (December 2019)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths. An attacker who successfully exploited this vulnerability could write...
Microsoft Visual Studio 2008 Express IDE XML Injection
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-VISUAL-STUDIO-EXPRESS-2008-IDE-XML-EXTERNAL-ENTITY-0Day.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Visual Studio 2008 Express IDE vcsetup.exe File...
Security Update for Microsoft Visual Studio Code (CVE-2019-1414)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.39.1. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A...
Microsoft Visual Studio Integrated Shell Installed
Binary data microsoftvsintshellinstalled.nbin...
Security Updates for Microsoft Visual Studio Products (November 2019)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files. An attacker who successfully...
KLA11607 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely ...
Microsoft Visual Studio CVE-2019-1425 Remote Privilege Escalation Vulnerability
Description Microsoft Visual Studio is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio 2017 15.9 Microsoft Visual Studio 2019 16.0 Microsoft Visual Studio 2019 16.3 Recommendations...
Microsoft Visual Studio Code CVE-2019-1414 Local Privilege Escalation Vulnerability
Description Microsoft Visual Studio Code is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio Code Recommendations Permit local access for trusted individuals only. Where possible, us...
KLA11585 Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges. Original advisories CVE-2019-1414 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Visual-Studio CVE list CVE-2019-1414 critical KB list Solution Instal...
Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)
An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...