CVE-2024-43488

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...

CVE-2024-43488

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...

CVE-2024-43488 Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

...

CVE-2024-43488

CVE-2024-43488 affects the Visual Studio Code extension for Arduino. The vulnerability is a missing authentication in a critical function, enabling remote code execution over a network attack vector. Impact per sources is arbitrary code execution with high/critical severity. Affected component is...

CVE-2024-43488 Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

...

CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability

...

CVE-2024-43601

Visual Studio Code for Linux Remote Code Execution Vulnerability...

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...

Visual Studio Code for Linux Remote Code Execution Vulnerability

...

CVE-2024-43488: Missing Authentication for Critical Function

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...

CVE-2024-43601: Improper Neutralization of Special Elements used in a Command

Visual Studio Code for Linux Remote Code Execution Vulnerability...

PT-2024-6977 · Microsoft · Visual Studio Code Extension For Arduino

Name of the Vulnerable Software and Affected Versions: Visual Studio Code extension for Arduino affected versions not specified Description: The issue is related to missing authentication for a critical function in the Visual Studio Code extension for Arduino, allowing an unauthenticated attacker...

Microsoft Visual Studio Code Access Control Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in the Microsoft Visual Studio Code extension for Arduino, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Visual Studio Code command injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A command injection vulnerability exists in Microsoft Visual Studio Code. An attacker exploiting this vulnerability could remotely execute code. No information about this vulnerability is available at this time, please...

PT-2024-6834 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to the failure to neutralize special elements used in operating system commands. This could allow a remote attacker to execute arbitrary code. Recommendation...

CVE-2024-9145

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145

The CVE-2024-9145 issue affects Wiz Code Visual Studio Code extension versions 1.0.0–1.5.3 and Wiz (legacy) Visual Studio Code extension versions 0.13.0–0.17.8. When a user opens a maliciously crafted Dockerfile located in a path marked as a “trusted folder” in Visual Studio Code and initiates a ...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145: Improper Neutralization of Special Elements used in a Command

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...