CVE-2022-22539

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22539 via crafted JPEG parsing. The published ZDI advisory describes an out-of-bounds write in JPG parsing that can allow remote code execution when a user opens a manipulated JPEG (requires user interaction). In the SAP NVD entry, the i...

CVE-2022-22538

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22538 through AI file parsing. The vulnerability is an out-of-bounds/write condition in the AI parsing code that can allow remote code execution. Exploitation requires a user to open a malicious AI/.ai.x3d file (user interaction), potent...

CVE-2022-22537

When a user opens a manipulated Tagged Image File Format .tiff, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with the...

CVE-2022-22537

CVE-2022-22537 affects SAP 3D Visual Enterprise Viewer (v9.0) and is triggered by opening manipulated TIFF/2d.x3d files from untrusted sources, causing the application to crash and become temporarily unavailable until restart. Connected sources confirm the affected product/version and describe th...

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2022-21991 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

CVE-2022-21991

CVE-2022-21991 is a remote code execution vulnerability in the Visual Studio Code Remote Development Extension. The provided documents confirm an RCE impact (high severity, CVSS v3.1 base 8.1) with network-based access and no user interaction, but do not specify affected product versions or explo...

PT-2022-15508 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9.0 Description: The issue occurs when a user opens a manipulated JPEG file format received from untrusted sources, causing the application to crash and become temporarily unavailable until restart...

PT-2022-15507 · Sap +1 · Sap 3D Visual Enterprise Viewer +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9.0 Description: The issue occurs when a user opens a manipulated Adobe Illustrator file format .ai, .x3d from untrusted sources, causing the application to crash and become temporarily unavailable unti...

PT-2022-15506 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9.0 Description: The issue occurs when a user opens a manipulated Tagged Image File Format .tiff, 2d.x3d received from untrusted sources, causing the application to crash and become temporarily...

Security Updates for Microsoft Visual Studio Products (February 2022)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by a denial of service DoS vulnerability. An unauthenticated, remote attacker can exploit this issue to cause the application to stop responding. Note that Nessus has not tested for this issue but has...

Rocky Linux 8 : .NET Core 2.1 (RLSA-2021:3145)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3145 advisory. - .NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-34485 Note that Nessus has not tested for this issue but has instead relied only on t...

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

Kestrel Web Server 输入验证错误漏洞

Kestrel Web Server is a cross-platform web server for ASP.NET Core. An input validation error vulnerability exists in Kestrel Web Server. The following products and releases are affected:Microsoft Visual Studio 2019 version 16.9 includes 16.0 - 16.8,Microsoft Visual Studio 2019 version 16.11...

Security update deployment information: February 8, 2022 (KB5010644)

None None...

Security Update for Visual Studio 2019 (February 2022) (macOS)

The Microsoft Visual Studio 2019 runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerability: - A Denial of Service vulnerability exists in .NET 6.0 and .NET 5.0 when the Kestrel web server processes certain HTTP/2...

Microsoft Visual Studio Code 代码注入漏洞

A code injection vulnerability exists in Microsoft Visual Studio Code, an open source code editor from Microsoft Corporation. The vulnerability stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker...