Lucene search
K

8 matches found

Snyk
Snyk
added 2026/04/04 6:26 a.m.3 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the AddExtension function in the ExtractZip module. An attacker can write arbitrary files outside the intended directory by submitting a specially crafted VSIX file containing path traversal entries. Details A...

8.7CVSS6.4AI score0.00019EPSS
Exploits0References2
Talos Blog
Talos Blog
added 2025/10/16 10:0 a.m.3 views

BeaverTail and OtterCookie evolve with a new Javascript module

Cisco Talos has uncovered a new attack linked to Famous Chollima, a threat group aligned with North Korea DPRK. This group is known for impersonating hiring organizations to target job seekers, tricking them into installing information-stealing malware to obtain cryptocurrency and user credential...

8.1AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:9 p.m.6 views

CVE-2020-0789

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'...

7.1CVSS6.8AI score0.00304EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/02/14 8:15 p.m.2 views

CVE-2023-21568

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

7.3CVSS7.2AI score0.00578EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2020/04/15 3:12 p.m.14 views

CVE-2020-0900

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...

5.9AI score0.00328EPSS
Exploits0References1
Prion
Prion
added 2020/03/12 4:15 p.m.16 views

Denial of service

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'...

6.6CVSS6.7AI score0.00304EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/03/11 12:0 a.m.1 views

Microsoft Visual Studio Extension Installer Service Denial of Service Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. A denial of service vulnerability exists in the Microsoft Visual Studio Extension Installer...

7.1CVSS6.6AI score0.00304EPSS
Exploits0References1
CNVD
CNVD
added 2019/11/20 12:0 a.m.2 views

JetBrains ReSharper DLL Hijacking Vulnerability

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. NET development. The program is mainly used for code quality analysis, code error alerts, etc. installers is the installation program for JetBrains ReSharper. This program is mainly used for co...

7.3CVSS7.1AI score0.00001EPSS
Exploits0References1
Rows per page
Query Builder