Head Start Cross-Site Scripting Vulnerability

Head Start is a web-based knowledge mapping software open-sourced by Open Knowledge Maps. Designed to give researchers a head start on literature reviews hence the name. A security vulnerability exists in Open Knowledge Maps Head Start, Visual Project Explorer version 1.0. An attacker exploited t...

CVE-2023-40618

CVE-2023-40618 is a reflected XSS affecting OpenKnowledgeMaps Head Start (versions 4–7) and Visual Project Explorer 1.0. The vulnerability arises from handling of the ‘service’ parameter in the headstart_snapshot.php endpoint, allowing remote attackers to inject JavaScript into a user session. Do...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CLSA-2023-1695063978 Fix CVE(s): CVE-2023-4735, CVE-2023-4733

SECURITY UPDATE: Use-after-free in doecmd - debian/patches/CVE-2023-4733.patch: Verify oldwin pointer after resetVIsual - CVE-2023-4733 SECURITY UPDATE: Potential OOB write in doaddsub - debian/patches/CVE-2023-4735.patch: Don't overflow buf2, check size in for loop - CVE-2023-4735...

CLSA-2023-1695063445 vim: Fix of CVE-2023-4733

CVE-2023-4733: verify oldwin pointer after resetVIsual...

CLSA-2023-1695063163 vim: Fix of CVE-2023-4733

CVE-2023-4733: verify oldwin pointer after resetVIsual...

Microsoft Visual Studio Code Remote Code Execution Vulnerability (CNVD-2023-72223)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2023-101685)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Oracle Linux 9 : .NET / 6.0 (ELSA-2023-5143)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5143 advisory. 6.0.122-1.0.1 - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1997 Tenable has extracted the preceding description block directly from the Orac...

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Visual Studio Multiple Vulnerabilities-03 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-5146)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5146 advisory. 7.0.111-1.0.1 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 Tenable has extracted the preceding description block directly from the Orac...

Microsoft Visual Studio Multiple Vulnerabilities-02 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Visual Studio Multiple Vulnerabilities-04 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Visual Studio Code’s source editor, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...