10907 matches found
CVE-2024-43263 WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...
PT-2024-30426 · Unknown · Visual Composer Starter
Name of the Vulnerable Software and Affected Versions: Visual Composer Starter versions through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
WordPress plugin Visual Composer Starter has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-43263: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...
BIT-DOTNET-SDK-2024-38167 .NET and Visual Studio Information Disclosure Vulnerability
.NET and Visual Studio Information Disclosure Vulnerability...
BIT-DOTNET-SDK-2024-38168 .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability...
BIT-DOTNET-2024-38168 .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability...
Important: dotnet8.0
Issue Overview: .NET Core and Visual Studio Denial of Service Vulnerability CVE-2024-30105 .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-35264 .NET and Visual Studio Denial of Service Vulnerability CVE-2024-38095 Affected Packages: dotnet8.0 Issue Correction: Run dnf update...
Security Updates for Microsoft Visual Studio Products (August 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET and Visual Studio Information Disclosure Vulnerability. CVE-2024-38167 - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-38168 Note...
Six 0-Days Lead Microsoft’s August 2024 Patch Push
Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This months bundle of update joy from Redmond includes patches for...
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update their applications t...
GHSA-7QRV-8F9X-3H32 Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update their applications t...
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update their...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in two Developer tools. Successful exploitation requires the malicious party to trick the victim into opening and processing a rogue file. Azure IoT SDK: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
CVE-2024-38168
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38167
.NET and Visual Studio Information Disclosure Vulnerability...
CVE-2024-38167
.NET and Visual Studio Information Disclosure Vulnerability...
CVE-2024-38168
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38168
CVE-2024-38168 is a Windows-only Denial of Service vulnerability in .NET and ASP.NET/HTTP.sys affecting .NET 8.0 runtimes prior to 8.0.8 (and related ASP.NET packages). The issue arises when an unauthenticated client sends requests that trigger the HTTP.sys DoS condition. Microsoft’s advisory lis...
