10922 matches found
Adobe After Effects Input Validation Error Vulnerability (CNVD-2023-9999192)
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...
Insights into your unpatched vulnerabilities
Every day, nearly 70 brand-new vulnerabilities are discovered in software products around the world. That’s almost 25,550 new problems each year, of which roughly 4,250 or every one-in-six will be classified as “critical.” But with little guidance beyond “critical” classifications—and with the...
convert-and-download (0.3.0), nbinteract (>=0.0.18, <=0.1.8) +3 more potentially affected by CVE-2023-49080 via jupyter-server (1.13.2)
jupyter-server PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - convert-and-download 0.3.0 - nbinteract =0.0.18, =0.0.2, =0.1.0, =4.3.2 Source cves: CVE-2023-49080 Source advisory:...
Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack
A new "post-exploitation tampering technique" can be abused by malicious actors to visually deceive a target into believing that their Apple iPhone is running in Lockdown Mode when it's actually not and carry out covert attacks. The novel method, detailed by Jamf Threat Labs in a report shared wi...
Cobalt Graphite Xenon Argon Lithium Ashlar-Vellum Buffer Overflow
The vulnerability of Cobalt, Graphite, Xenon, Argon, and Lithium Ashlar-Vellum software for parametric automated design and 3D modeling involves reading data beyond the buffer limit in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by introducing specially...
Jupyter Extension Spear Phishing
The vulnerability of the Jupyter extension in Microsoft Visual Studio relates to errors in information presentation on the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...
Microsoft .NET Framework Privilege Escalation
The vulnerability of the Microsoft .NET Framework software platform, along with the Microsoft Visual Studio development tools, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
Microsoft Visual Studio Resource Consumption DoS
The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...
CVE-2023-46944
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
CVE-2023-46944
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
Authorization
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
CVE-2023-46944: Undefined Security Weakness
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
CVE-2023-46944
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
CVE-2023-46944
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
CVE-2023-46944
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component...
Oracle Linux 9 : dotnet7.0 (ELSA-2023-7255)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7255 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...
GitLens Security Breach
GitLens is a feature-enhancing plugin for VSCode. A security vulnerability exists in versions prior to GitLens v.14.0.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via a crafted file...
Oracle Linux 8 : dotnet6.0 (ELSA-2023-7258)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7258 advisory. 6.0.125-1.0.2 - Add strict BuildRequires on 6.0.125-1.0.1 6.0.125-1.0.1 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 Tenable has extracted the...
Visual Studio Code Source Editor Code Execution
The vulnerability of the Visual Studio Coded source editor is related to inadequate control over code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Oracle Linux 8 : dotnet7.0 (ELSA-2023-7256)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7256 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...