1487 matches found
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-26700
The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...
CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
...
CVE-2021-1639
CVE-2021-1639 appears as a Visual Studio Code remote code execution vulnerability. Connected sources confirm Visual Studio Code is affected and note public exploits exist (Kaspersky). The documents provide high-severity impact for this CVE but do not consistently expose concrete root-cause detail...
CVE-2021-1639 Visual Studio Code Remote Code Execution Vulnerability
...
PT-2021-17098 · Microsoft · Visual Studio Code Npm-Script Extension
Name of the Vulnerable Software and Affected Versions: Visual Studio Code npm-script Extension affected versions not specified Description: The issue concerns a remote code execution vulnerability in the Visual Studio Code npm-script Extension. There is no information provided about the estimated...
Security Update for Microsoft Visual Studio Code (Feb 2021)
An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
Security Update for Microsoft Visual Studio Code npm-script Extension (Feb 2021)
A remote code execution vulnerability exists in Visual Studio Code when the npm-script extension loads. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. Note that Nessus has not tested for this issue but has instead relied only ...
Visual Studio Code Remote Code Execution Vulnerability
...
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
...
Microsoft Visual Studio Code npm-script plugin security vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft. A security vulnerability exists in the npm-script plugin for Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code - npm-script Extension...
Microsoft Visual Studio Code Security Vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Microsoft Visual Studio 2019 version 16.8,Visual Studio Code,Microsoft Visual Studio 2017...
PT-2021-2154 · Microsoft · Visual Studio +1
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute...
KLA12073 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET Core can be...
The vulnerability of the TSLint code analyzer in Visual Studio Code, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of the TSLint code analyzer in the Visual Studio Code editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the SSH protocol used by the code editor Visual Studio Code, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of the SSH protocol used by the code editor Visual Studio Code is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Language Support component of the Microsoft Visual Studio Code Java Extension, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Language Support component in the Microsoft Visual Studio Code Java Extension package is related to improper code generation management. Exploiting this vulnerability may allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio Code Java Extension relates to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
