PT-2024-6834 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to the failure to neutralize special elements used in operating system commands. This could allow a remote attacker to execute arbitrary code. Recommendation...

Microsoft Visual Studio和Microsoft .NET 资源管理错误漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

Microsoft Visual Studio 后置链接漏洞

Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A backlink vulnerability exists in Microsoft Visual Studio. The following products and...

UBUNTU-CVE-2024-43485

.NET and Visual Studio Denial of Service Vulnerability...

Microsoft .NET和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

Microsoft Visual Studio Code 命令注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A command injection vulnerability exists in Microsoft Visual Studio Code. An attacker exploiting this vulnerability could remotely execute code. No information about this vulnerability is available at this time, please...

PT-2024-7146

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.9 .NET versions prior to 6.0.34 .NET Framework affected versions not specified Visual Studio affected versions not specified Description The issue is related to algorithmic complexity in the .NET platform, .NET...

Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...

PT-2024-7347

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to algorithmic complexity in the .NET and Visual Studio platform, which can be exploited by a remote attacker to cause a denial of service...

PT-2024-7147

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio affected versions not specified Description The issue is related to an uncontrolled memory allocation, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the...

PT-2024-6977 · Microsoft · Visual Studio Code Extension For Arduino

Name of the Vulnerable Software and Affected Versions: Visual Studio Code extension for Arduino affected versions not specified Description: The issue is related to missing authentication for a critical function in the Visual Studio Code extension for Arduino, allowing an unauthenticated attacker...

CVE-2024-47348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YellowPencil YellowPencil Visual CSS Style Editor yellow-pencil-visual-theme-customizer allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through = 7.6.4...

CVE-2024-47348 WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.4...

PT-2024-32563 · Unknown · Yellowpencil Visual Css Style Editor

Name of the Vulnerable Software and Affected Versions: YellowPencil Visual CSS Style Editor versions n/a through 7.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. A...

CVE-2024-9145

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

CVE-2024-9145

The CVE-2024-9145 issue affects Wiz Code Visual Studio Code extension versions 1.0.0–1.5.3 and Wiz (legacy) Visual Studio Code extension versions 0.13.0–0.17.8. When a user opens a maliciously crafted Dockerfile located in a path marked as a “trusted folder” in Visual Studio Code and initiates a ...

CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension

Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...

Wiz Code和Wiz (legacy) 安全漏洞

Wiz Code and Wiz legacy are both a Visual Studio Code extension from Wiz, Inc. A security vulnerability exists in Wiz Code versions 1.0.0 through 1.5.3 and Wiz legacy versions 0.13.0 through 0.17.8, which stems from vulnerability to local command injection attacks...

Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses Werkzeug-2.2.3-py3-none-any.whl which is vulnerable to this CVE-2023-46136

Summary Security Bulletin: IBM Maximo Application Suite - Maximo Visual Inspection Component uses Werkzeug-2.2.3-py3-none-any.whl which is vulnerable to this CVE-2023-46136 Vulnerability Details CVEID:CVE-2023-46136 DESCRIPTION: Pallets Werkzeug is vulnerable to a denial of service, caused by a...