Visual Studio Code Path Traversal

The vulnerability of Visual Studio Code’s source editor relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-47783

Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attack...

CVE-2024-6712

The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-6712

The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-6712 MapFig Studio <= 0.2.1 - Stored XSS via CSRF

The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-6712 MapFig Studio <= 0.2.1 - Stored XSS via CSRF

The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2025-32703

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally...

CVE-2025-21264

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-32702

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

dataops-toolkits (>=0.1.1, <=0.1.2), rm-gallery (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (>=1.5.0, <=1.17.0)

label-studio PYPI version =1.5.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: OSV:GHSA-8JHR-WPCM-HH4H...

dataops-toolkits (>=0.1.1, <=0.1.2), rm-gallery (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (>=1.5.0, <=1.17.0)

label-studio PYPI version =1.5.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: SNYK:PYTHON-LABELSTUDIO-10182217...

hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-47783 via label-studio (0.8.1)

label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2025-47783 Source advisory: OSV:GHSA-8JHR-WPCM-HH4H...

dataops-toolkits (>=0.1.1, <=0.1.2), rm-gallery (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (>=1.5.0, <=1.17.0)

label-studio PYPI version =1.5.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: GHSA-8JHR-WPCM-HH4H...

WordPress plugin MapFig Studio has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-6712: Improper Neutralization of Input During Web Page Generation

The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

Security Update for Microsoft Visual 2017 15.9 (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a information disclosure vulnerability where Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. CVE-2025-32703 Note that Ness...

PT-2025-21492 · WordPress · Mapfig Studio Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The MapFig Studio WordPress plugin versions 0.2.1 and earlier Description: The issue concerns a lack of CSRF check in some areas of the plugin, along with missing sanitization and escaping. This could allow attackers to make logged-in admins...

Citrix Virtual Desktop - Username show "-" in the Citrix Studio after launching Server Desktop

After user session Launched, the "current username" in Citrix Studio shows "-"...

Microsoft Visual Studio Command Injection

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...