PT-2024-5700

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue is related to the transmission of credentials in unencrypted form, which could allow a remote attacker to disclose protected information. Recommendations At the momen...

Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

Markdown PDF path traversal vulnerability

Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developer. A security vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit the vulnerability to traverse pathnames...

Markdown PDF Cross-Site Scripting Vulnerabilities

Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developers. A cross-site scripting vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit this vulnerability to perform a cross-site scripting attack...

Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

CVE-2024-38167: Cleartext Transmission of Sensitive Information

.NET and Visual Studio Information Disclosure Vulnerability...

UBUNTU-CVE-2024-38167

.NET and Visual Studio Information Disclosure Vulnerability...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...

WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Visual Composer Starter versions = 3.3...

WordPress Visual Composer Starter Theme <= 3.3 is vulnerable to Cross Site Scripting (XSS)

Software Visual Composer Starter Type Theme Vulnerable versions = 3.3 Fixed in 3.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43263 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce7f81ff359f Credits stealthcopter Required privilege...

CVE-2024-7621: Missing Authorization

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processwpfeedbackmiscoptions function in all versions up to, and including, 4.0.2. This makes it possible for...

Fedora: Security Advisory (FEDORA-2024-5e87ad4678)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-fe5420ed3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-5708

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...

CVE-2024-5708

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...

CVE-2024-5709

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.7 via the 'layoutname' parameter. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an...

CVE-2024-5709

WPBakery Visual Composer Local File Inclusion (CVE-2024-5709) affects WPBakery Visual Composer up to version 7.7 via the layout_name parameter. Exploitation requires Author-level access (plus post-permissions granted by an Administrator) to include/execute arbitrary PHP files on the server, enabl...

CVE-2024-5709 WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.7 via the 'layoutname' parameter. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an...

CVE-2024-5709 WPBakery <= 7.7 - Authenticated (Author+) Local File Inclusion

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.7 via the 'layoutname' parameter. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an...

CVE-2024-5708 WPBakery <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...