Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: February 8, 2022 (KB5011164)

None None...

Lack of slippage checks during swap

Handle ye0lde Vulnerability details Impact Since the code does not use a minimum return value for swaps it is susceptible to sandwich attacks. More information here: Proof of Concept Here the code Calls Curve to convert the existing underlying balance into UST: / Calls Curve to convert the existi...

Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the wyppagetype parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=yellow-pencil-editor=1pageid=homepagetype=homemode=singlepagetype=...

WordPress Visual CSS Style Editor plugin <= 7.5.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Visual CSS Style Editor plugin versions = 7.5.3. Solution Update the WordPress Visual CSS Style Editor plugin to the latest available version at least 7.5.4...

Microsoft Windows Explorer Preview Pane Security Bypass Vulnerability

Previewing a WMA/WMV media format on Windows Explorer through its Preview Pane causes embedded URLs to be automatically opened in the default browser without displaying any prompt. Exploit Title: Windows Explorer Preview Pane WMV/WMA media Automatic URI Opening Vulnerability Exploit Author: Eduar...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33132)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33131)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer version 9.0 is...

SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Fedora: Security Advisory for vim (FEDORA-2021-b0ac29efb1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Updates for Microsoft Visual Studio Products (December 2021)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-43877 Note that Nessus has not tested for this issue but has...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms. This allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

Security Update for Microsoft Visual Studio Code Remote WSL Extension (December 2021)

The Microsoft Visual Studio Code Remote Windows Subsystem for Linux WSL extension is prior to version 0.63.11. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to execute arbitrary code on the system with privileges of the...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability...

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability...