Lucene search
+L

9077 matches found

Veracode
Veracode
added 2024/10/19 9:9 a.m.8 views

Remote Code Execution (RCE)

.NET and Visual Studio is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling and validation of input or components, which allows an attacker to execute arbitrary code remotely by crafting malicious inputs or exploiting affected features...

8.1CVSS8.3AI score0.02078EPSS
SaveExploits0References9Affected Software13
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:0 a.m.11 views

The vulnerability of the Visual Studio Code extension for Arduino, a code editor for Visual Studio Code, arises from the lack of authentication for a critical function. This allows a hacker to execute arbitrary code.

The vulnerability of the Visual Studio Code extension for Arduino code editor involves a lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.3AI score0.01148EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/10/17 7:11 p.m.15 views

BIT-DOTNET-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

8.1CVSS8.1AI score0.02078EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/17 7:11 p.m.19 views

BIT-DOTNET-SDK-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

8.1CVSS8.1AI score0.02078EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/10/17 12:0 a.m.5 views

Microsoft .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

8.1CVSS7.9AI score0.02078EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:0 a.m.19 views

Microsoft Visual Studio Code extension for Arduino remote code execution vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in the Microsoft Visual Studio Code extension for Arduino, which can be exploited by an attacker to execute arbitrary code on a system...

9.8CVSS8.1AI score0.01148EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:0 a.m.6 views

Microsoft .NET and Visual Studio Denial of Service Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

7.5CVSS6.4AI score0.03052EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/16 1:42 p.m.3 views

MAL-2024-9907 Malicious code in visual-aqua-amphibian (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:42 p.m.2 views

Malicious code in visual-aqua-amphibian (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.14 views

The vulnerability of the Visual Studio C++ Redistributable installation program allows a hacker to enhance their privileges.

The vulnerability of the Visual Studio C++ Redistributable installation tool for Microsoft Visual Studio development tools is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.0043EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.19 views

The vulnerability of Visual Studio Code’s source editor lies in its failure to properly eliminate special elements used in operating system commands, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS5.9AI score0.01055EPSS
SaveExploits0References3Affected Software2
Spring Security Advisories
Spring Security Advisories
added 2024/10/15 12:0 a.m.31 views

This Week in Spring - October 15th, 2024

Hi, Spring fans! Welcome to another rip-roaring and ever-so-riveting installment of This Week in Spring! I'm in Amsterdam, at the moment, rounding out a week between Antwerp, Beglium, and Amsterdam, the Netherlands. Today I'm off to Dubai for the fantastic GITEX/DevSlam event. Then I return back ...

7.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/11 4:18 p.m.21 views

Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses dnspython-2.3.0-py3-none-any.whl which is vulnerable to this CVE-2023-29483

Summary Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses dnspython-2.3.0-py3-none-any.whl which is vulnerable to this CVE-2023-29483 Vulnerability Details CVEID:CVE-2023-29483 DESCRIPTION: Dnspython is vulnerable to a denial of service, caused by a flaw in...

7CVSS6.5AI score0.01857EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:0 a.m.41 views

Security Updates for Microsoft Visual Studio Products (October 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET Denial of Service Vulnerability in System.Security.Cryptography.Cose, System.IO.Packaging, System.Runtime.Caching CVE-2024-43483 - .NET Denial of Service...

7.8CVSS8.1AI score0.03052EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:0 a.m.50 views

Security Update for Microsoft Visual Studio Code (October 2024)

The version of Microsoft Visual Studio Code installed on the remote Linux host is prior to 1.94.1. It is, therefore, affected by a remote code execution vulnerability. A remote attacker can use this to execute arbitrary commands. Note that Nessus has not tested for this issue but has instead reli...

7.8CVSS6.8AI score0.01055EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
added 2024/10/09 5:8 p.m.14 views

Google Search user interface: A/B testing shows security concerns remain

For the past few days, Google has been A/B testing some subtle visual changes to its user interface for the search results page. You may only get the new UI for certain types of searches or based on your current geolocation. This test is not to be confused with but could part of a previously...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/10/09 6:53 a.m.64 views

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

9.8CVSS8.6AI score0.84225EPSS
SaveExploits5
NCSC
NCSC
added 2024/10/08 7:59 p.m.18 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person could exploit the vulnerabilities to cause a Denial-of-Service, grant themselves elevated privileges or execute arbitrary code with the victim's privileges. Successful exploitation requires the malicious party to...

9.8CVSS8.2AI score0.03052EPSS
SaveExploits0
Talos Blog
Talos Blog
added 2024/10/08 7:4 p.m.48 views

Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...

9.8CVSS10AI score0.66571EPSS
SaveExploits4
NVD
NVD
added 2024/10/08 6:15 p.m.32 views

CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability...

5.5CVSS0.00767EPSS
SaveExploits0References1
Rows per page
Query Builder