Lucene search
+L

10328 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/21 12:00 a.m.13 views

The vulnerability of the Python extension for Visual Studio Code, a code editor from Visual Studio Code, relates to breaches of confidentiality boundaries, allowing the intruder to execute arbitrary code.

The vulnerability of the Python extension for the Visual Studio Code code editor involves breaching trust boundaries. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

10CVSS5.9AI score0.01234EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/11/20 7:09 a.m.16 views

BIT-DOTNET-SDK-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

9.8CVSS9.4AI score0.03591EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:08 a.m.18 views

BIT-DOTNET-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02595EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:08 a.m.17 views

BIT-DOTNET-SDK-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02595EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/11/19 9:36 p.m.485 views

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

5.3CVSS6.8AI score0.01962EPSS
SaveExploits1
NVD
NVD
added 2024/11/19 5:15 p.m.19 views

CVE-2024-51848

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Parallaxer parallaxer-lite-parallax-effects-on-images allows Stored XSS.This issue affects Parallaxer: from n/a through = 1.00...

6.5CVSS0.00374EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.25 views

CVE-2024-51848 WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Parallaxer parallaxer-lite-parallax-effects-on-images allows Stored XSS.This issue affects Parallaxer: from n/a through = 1.00...

6.5CVSS0.00374EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.43 views

CVE-2024-51848

CVE-2024-51848 : Stored XSS in WordPress Parallaxer plugin (Parallaxer

6.5CVSS7.2AI score0.00374EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/11/19 8:57 a.m.1289 views

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...

8.8CVSS9.1AI score0.14179EPSS
SaveExploits2
Patchstack
Patchstack
added 2024/11/18 9:48 a.m.10 views

WordPress Awesome Studio plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Awesome Studio versions = 2.4.4...

7.1CVSS6.1AI score0.00339EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2024/11/18 3:12 a.m.19 views

Cross-Site Scripting (XSS)

studio-42/elfinder is vulnerable to persistent Cross-site Scripting XSS. The vulnerability is due to a filename restriction bypass, allowing attackers to inject malicious scripts...

6.1CVSS6.3AI score0.00272EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/18 12:00 a.m.22 views

WordPress Awesome Studio Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Studio Type Plugin Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83cb8daf8eb9 Credits Le Ngoc Anh Required privilege...

6.5AI score0.00339EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/11/16 9:39 p.m.54 views

CVE-2024-52411

CVE-2024-52411 describes a deserialization of untrusted data vulnerability in Flowcraft UX Design Studio Advanced Personalization, enabling PHP object injection. Affected: Flowcraft Advanced Personalization component, versions up to 1.1.2 (n/a through 1.1.2). CVSS 3.1 base 9.8 (Network attack vec...

9.8CVSS7.2AI score0.00509EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/16 9:39 p.m.19 views

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2...

9.8CVSS6.9AI score0.00509EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/16 9:39 p.m.30 views

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

9.8CVSS0.00509EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/16 12:00 a.m.9 views

PT-2024-35251 · Unknown · Flowcraft Ux Design Studio

Name of the Vulnerable Software and Affected Versions: Flowcraft UX Design Studio Advanced Personalization versions from n/a through 1.1.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This problem affects the Advanced Personalization...

9.8CVSS9.5AI score0.00509EPSS
SaveExploits0References8
CNVD
CNVD
added 2024/11/15 12:00 a.m.20 views

Microsoft Visual Studio Code Python Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code Python Extension, which can be exploited by an attacker to execute arbitrary code on a system...

8.8CVSS8.1AI score0.01234EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:00 a.m.25 views

Security Update for Microsoft Visual Studio Code Remote SSH Extension (November 2024)

The Microsoft Visual Studio Code Remote SSH Extension is prior to version 0.115.1. It is, therefore, affected by an undisclosed elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

7.1CVSS7.2AI score0.00429EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.13 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has vulnerabilities related to insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by modifying binary data...

7.8CVSS5.5AI score0.00172EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2024/11/15 12:00 a.m.33 views

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-48759)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker can exploit...

6.7CVSS6.6AI score0.0075EPSS
SaveExploits0References1
Rows per page
Query Builder