5199 matches found
Microsoft Visual Studio和Microsoft .NET Core信息泄露漏洞
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
PT-2021-7949 · Microsoft +3 · Visual Studio +4
Name of the Vulnerable Software and Affected Versions: .NET Core versions prior to 5.0.9 .NET Core versions prior to 3.1.18 .NET Core versions prior to 2.1.29 Visual Studio affected versions not specified Description: The issue is related to insufficient protection of sensitive data in Microsoft...
Security Updates for Microsoft Visual Studio Products (August 2021)
The Microsoft Visual Studio Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2021-26423 - An...
Microsoft Visual Studio和Microsoft .NET Core 信息泄露漏洞
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
Microsoft Visual Studio和Microsoft .NET Core 输入验证错误漏洞
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in its Developer products. The vulnerabilities allow a malicious party to launch attacks execute attacks that could lead to access to sensitive data, or Denial-of-Service, for example, through services and applications that make use of these vulnerable products...
KLA12257 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in .NET Core and Visual Studio can ...
Microsoft Visual Studio Code Command Injection Vulnerability (CNVD-2021-61415)
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Visual Studio Code versions prior to 1.3.0, which stems from a problem with Visual Studio Code's unofficial vcode -phpmd aka PHP Mess Detector extension. The vulnerability can be...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
Microsoft Visual Studio Code 命令注入漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Visual Studio Code versions prior to 1.3.0, which stems from a problem with Visual Studio Code's unofficial vcode -phpmd aka PHP Mess Detector extension. The vulnerability can be...
CVE-2021-30124
The CVE-2021-30124 issue affects the vscode-phpmd (PHP Mess Detector) extension for Visual Studio Code, specifically versions 1.3.0 and earlier. The root cause is a crafted phpmd.command value within a workspace folder that enables remote code execution. This results in arbitrary code execution w...
[ASA-202107-34] code: arbitrary code execution
Arch Linux Security Advisory ASA-202107-34 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-31211 CVE-2021-31214 Package : code Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1963 Summary ======= The package co...
Microsoft Visual Studio Code maven.executable.options Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Visual Studio Spoofing Vulnerability (CNVD-2021-54406)
Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...
CVE-2021-34529
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-34528
Visual Studio Code Remote Code Execution Vulnerability...