Microsoft Visual Studio Team Foundation Server Privilege Elevation Vulnerability (2719584)

This host is missing an important security update according to Microsoft Bulletin MS12-061. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Studio Team Foundation / Azure DevOps Server Detection (Windows SMB Login)

SMB login-based detection of Microsoft Visual Studio Team Foundation / Azure DevOps Server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-1892

Cross-site scripting XSS vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."...

Microsoft Ships Two Bulletins in September Security Update

The Microsoft security team shipped just two bulletins – resolving as many holes – in the September, 2012 edition of Patch Tuesday. The patches will supply fixes for two ‘important’ rated bugs, one in Microsoft Developer Tools and the other in Micrososft Server Software. If unpatched, both could...

CVE-2012-1892

Cross-site scripting XSS vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."...

CVE-2012-1892

Summary (CVE-2012-1892) : A cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. The issue stems from improper input handling in the TFS web interface, enabl...

Microsoft Visual Studio Team Foundation Server XSS (MS12-061; CVE-2012-1892)

A reflected XSS vulnerability has been reported in Visual Studio Team Foundation Server...

MS12-061:Vulnerability in Visual Studio Team Foundation Server could allow elevation of privilege: September 11, 2012

None None...

Microsoft Visual Studio Team Foundation Server CVE-2012-1892 Cross Site Scripting Vulnerability

Description Microsoft Visual Studio Team Foundation Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Two Microsoft Security Updates Await In Advance of Certificate Key Length Changes

Microsoft is promising a light load of security updates for next Tuesday’s monthly patch release in an attempt to give Windows administrators and security teams time to prepare for an October change to certificate key length requirements. Angela Gunn of Microsoft’s Security Response Team announce...

Microsoft Visual Studio连接器整数溢出漏洞

Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 在基于COFF符号数量的基础上分配内存时连接器link.exe存在整数溢出，构建特制的PE文件，可触发基于堆的缓冲区溢出。 要成功利用漏洞需要诱使用户通过"dumpbin"或"link /dump"工具处理特制文件。 0 Microsoft Visual Studio 2008 Shell Integrated Mode - ENU 9.0.30729 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 9.00.21022.08...

Duqu's 'Mystery Code' Not New – Just 'Old School'

Researchers around the world put their heads together and solved the identity of ‘mystery code’ in the Duqu Trojan horse program, researchers from Kaspersky Lab announced on Monday. Weeks after announcing that they had discovered computer code of unknown provenance in the innards of the Duqu...

Microsoft Visual Studio Add-In本地权限提升漏洞(MS12-021)

BUGTRAQ ID: 52329 CVE ID: CVE-2012-0008 Microsoft Visual Studio（简称VS）是美国微软公司的开发工具包系列产品。 Microsoft Visual Studio从不安全路径加载插件时存在漏洞，通过在某些目录中放置恶意插件，并诱使用户开启VS，本地攻击者可利用此漏洞获取提升的权限。 0 Microsoft Visual Studio 2010 Microsoft Visual Studio 2008 SP1 厂商补丁： Microsoft ---------...

Microsoft Security Bulletin with Remote Desktop Flaws

Microsoft Security Bulletin with Remote Desktop Flaws Microsoft has released 6 updates in this month's patch Tuesday, including a patch for a critical hole which the software maker warns could be hit within the next 30 days. Microsoft is warning that there's a remote, pre-authentication,...

Microsoft Visual Studio code execution

Unsafe add-in loading...

Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)

This host is missing an important security update according to Microsoft Bulletin MS12-021. OpenVAS Vulnerability Test $Id: secpodms12-021.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Visual Studio Privilege Elevation Vulnerability 2651019 Authors: Sooraj KS Copyright: Copyright c 2012...

Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)

This host is missing an important security update according to Microsoft Bulletin MS12-021. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0008

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."...