Lucene search
K

61 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.3 views

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.02295EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/23 12:0 a.m.6 views

The vulnerability of Microsoft Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.02705EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2021/04/16 12:0 a.m.4 views

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Visual Studio Code versions prior to 0.3.2 that allows remote code execution via a crafted workspace configuration...

9.8CVSS9.1AI score0.02414EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.10 views

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in access control, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02911EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/18 12:0 a.m.4 views

Getty104 qiita-markdown 跨站脚本漏洞

Getty104 qiita-markdown is Getty104 an open source application . It provides an editor function. A cross-site scripting vulnerability exists in Qiita Markdown before 0.33.0, which originates from transformer...

6.1CVSS5.8AI score0.00774EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.5 views

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code...

7.8CVSS7.5AI score0.02911EPSS
Exploits0References3
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.7 views

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code Remote - SSH Extension...

7.8CVSS7.2AI score0.03552EPSS
Exploits0References3
CNVD
CNVD
added 2020/12/01 12:0 a.m.4 views

KindEditor is vulnerable to XSS

KindEditor is a set of open source online HTML editor . KindEditor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

5.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.3 views

The vulnerability of Visual Studio Code’s source editor arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.04243EPSS
Exploits0References3
CNVD
CNVD
added 2020/10/16 12:0 a.m.1 views

Command execution vulnerability in source editor pc client software

Source Editor is a graphical programming tool for Chinese children developed by Programming Cat. A command execution vulnerability exists in the Source Editor pc client software, which can be exploited by an attacker to gain server administrative privileges...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:0 a.m.4 views

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.01045EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.4 views

The vulnerability of Visual Studio Code’s source editor, related to a bug in file handling after opening a project, allows attackers to modify file access rights and execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to modify file access rights and execute arbitrary code...

9.3CVSS7.5AI score0.27705EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/10/14 9:29 p.m.3 views

CVE-2018-18290

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml&name=homecontent allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality...

4.8CVSS5.8AI score0.00621EPSS
Exploits0References1
Prion
Prion
added 2018/10/14 9:29 p.m.16 views

Design/Logic Flaw

DISPUTED An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml&name=homecontent allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality...

3.5CVSS4.7AI score0.00621EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2018/10/14 9:0 p.m.10 views

CVE-2018-18290

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edithtml&name=homecontent allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality...

5.7AI score0.00621EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2018/10/14 12:0 a.m.4 views

PT-2018-14394 · Nc Cms · Nc-Cms

Name of the Vulnerable Software and Affected Versions: nc-cms versions through 2017-03-10 Description: An issue was discovered that allows XSS via the HTML Source Editor in the "index.php?action=edit html&name=home content" endpoint. The vendor disputes this issue because the form requires...

4.8CVSS5.6AI score0.00621EPSS
Exploits0References4
Veracode
Veracode
added 2018/04/06 3:42 a.m.17 views

Cross-Site Scripting (XSS)

gleez/cms is vulnerable to Cross-site Scripting XSS attack. The HTML content in a source editor are not sanitized properly, allowing arbitrary HTML code to be executed when the source editor is rendered...

5.4CVSS5.4AI score0.0098EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2018/04/05 2:29 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers users to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode ...

3.5CVSS5.5AI score0.0098EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/04/05 2:29 p.m.18 views

CVE-2018-7035

Cross-site scripting XSS vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers users to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode ...

5.4CVSS5.6AI score0.0098EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/04/05 2:0 p.m.23 views

CVE-2018-7035

Cross-site scripting XSS vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers users to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode ...

5.4AI score0.0098EPSS
Exploits1References1
Rows per page
Query Builder