Lucene search
+L

10392 matches found

Microsoft CVE
Microsoft CVE
added 2022/03/08 8:00 a.m.157 views

.NET and Visual Studio Denial of Service Vulnerability

...

7.5CVSS7.7AI score0.03551EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.8 views

Microsoft .NET Core和Microsoft Visual Studio 输入验证错误漏洞

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

7.5CVSS6.9AI score0.03551EPSS
SaveExploits0References17
Kaspersky
Kaspersky
added 2022/03/08 12:00 a.m.134 views

KLA12474 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Visual Studio Code can be...

7.5CVSS8.8AI score0.03551EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/03/08 12:00 a.m.11 views

PT-2022-4632

Name of the Vulnerable Software and Affected Versions .NET versions prior to 6.0.3 .NET 5.0 versions prior to 5.0.15 .NET Core 3.1 versions prior to 3.1.23 Description The issue is related to a buffer overflow due to unchecked input data, which can allow a remote attacker to execute arbitrary cod...

7.5CVSS7.7AI score0.01608EPSS
SaveExploits0References47
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.10 views

Microsoft .NET Core和Microsoft Visual Studio 代码注入漏洞

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

6.8CVSS7.4AI score0.01608EPSS
SaveExploits0References18
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.10 views

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

6.1CVSS7.2AI score0.01608EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/03/08 12:00 a.m.44 views

Security Updates for Microsoft Visual Studio Products (March 2022)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2022-24464 - A remote...

7.5CVSS8.3AI score0.03551EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/02 4:40 p.m.121 views

Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation

Summary Multiple vulnerabilities in IBM Robotic Process Automation Vulnerability Details CVEID: CVE-2021-26701 DESCRIPTION: Microsoft .NET Core and Visual Studio could allow a remote attacker to execute arbitrary code on the system. By sending a specially crafted request, an attacker could exploi...

9.8CVSS8.7AI score0.30096EPSS
SaveExploits3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/03/01 12:00 a.m.21 views

(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

5.3CVSS3.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/03/01 12:00 a.m.15 views

(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

5.3CVSS3.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/03/01 12:00 a.m.25 views

(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

5.3CVSS3.9AI score
SaveExploits0
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.11 views

WordPress Page Studio Lite Plugin plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Studio Lite Plugin plugin versions = 1.0.6. Solution No patched version available...

3.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.10 views

WordPress Page Studio Lite Plugin plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Studio Lite Plugin plugin versions = 1.0.6. Solution No patched version available...

2.1AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:00 a.m.15 views

The vulnerability of Visual Studio Code’s source editor, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.13066EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/02/25 12:00 a.m.76 views

Imagemagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2022-20173)

Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio Imagemagick Studio, Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer...

7.5CVSS3AI score0.02762EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.11 views

The vulnerability of the Remote Development Extension extension of the Visual Studio Code editor allows a hacker to execute arbitrary code.

The vulnerability of the Remote Development Extension extension of the Visual Studio Code editor is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.1CVSS8.1AI score0.02075EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/19 1:15 a.m.16 views

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

6.1CVSS5.5AI score0.01172EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/19 1:15 a.m.23 views

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

6.1CVSS0.01172EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/19 1:15 a.m.5 views

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

6.1CVSS6.4AI score0.01172EPSS
SaveExploits0References4
Prion
Prion
added 2022/02/19 1:15 a.m.18 views

Cross site scripting

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

4.3CVSS5.9AI score0.01172EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder