CVE-2023-35390: Improper Neutralization of Special Elements used in a Command

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-35391: Undefined Security Weakness

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-38178: Uncontrolled Resource Consumption

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-36897: Improper Input Validation

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

KLA51717 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing...

PT-2023-4300

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio versions affected versions not specified Microsoft .NET versions affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio and the .NET platform, which...

Microsoft .NET and Visual Studio Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2023-4225

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio versions prior to the fixed version in August 2023 Patch Tuesday Description The issue is related to a Denial of Service DoS vulnerability in .NET and Visual Studio. It can be exploited for DoS attacks with no user...

UBUNTU-CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

Microsoft Visual Studio Security Vulnerability

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker cou...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

Microsoft .NET Core and Visual Studio Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

UBUNTU-CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

PT-2023-4295

Name of the Vulnerable Software and Affected Versions ASP.NET Core SignalR and Visual Studio affected versions not specified Description The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can potential...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-38695

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

Design/Logic Flaw

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-38695

CVE-2023-38695 affects the cypress-image-snapshot plugin (used with Cypress). The vulnerability allows a user to pass a relative file path as the snapshot name, enabling path traversal outside the project directory on the machine running tests. This is mitigated by upgrading to version 8.0.2 or l...

Oracle Business Intelligence Enterprise Edition Visual Analyzer Unauthorized Access

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete...