Lucene search
+L

9099 matches found

AlmaLinux
AlmaLinux
added 2021/11/09 8:52 a.m.36 views

Moderate: graphviz security update

Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and ...

7.8CVSS7.7AI score0.02614EPSS
SaveExploits1References2
Rockylinux
Rockylinux
added 2021/11/09 8:52 a.m.44 views

graphviz security update

An update is available for graphviz. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Graphviz is open-source graph-visualization software. Graph visualization is...

7.8CVSS7.6AI score0.02614EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2021/11/09 8:00 a.m.68 views

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: November 9, 2021 (KB5007275)

None None...

7.8CVSS6.7AI score0.00839EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2021/11/09 8:00 a.m.44 views

Visual Studio Elevation of Privilege Vulnerability

...

5.5CVSS6AI score0.00545EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2021/11/09 8:00 a.m.83 views

Visual Studio Code Elevation of Privilege Vulnerability

...

7.8CVSS8AI score0.00529EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/11/09 12:00 a.m.5 views

PT-2021-5295 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to bypass security restrictions and elevate their privileges...

5.5CVSS4.4AI score0.00545EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.8 views

Microsoft Visual Studio 权限许可和访问控制问题漏洞

Microsoft Visual Studio is an integrated development environment for developing computer programs, websites, web applications, web services, and mobile applications. an elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker could exploit this vulnerability to elevate...

5.5CVSS5.6AI score0.00545EPSS
SaveExploits0References5
Kaspersky
Kaspersky
added 2021/11/09 12:00 a.m.87 views

KLA12346 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be...

9.8CVSS8.8AI score0.87816EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2021/11/09 12:00 a.m.53 views

Security Update for Microsoft Visual Studio Code (November 2021)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.62.1. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

7.8CVSS7.7AI score0.00529EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/11/09 12:00 a.m.18 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed multiple vulnerabilities in Visual Studio and Visual Studio Code. The vulnerabilities allow a malicious person able to execute arbitrary code under the privileges of the user and obtain elevated privileges. Below is a summary of the various vulnerabilities described by compone...

9.8CVSS8.5AI score0.87816EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.17 views

Microsoft Visual Studio Code 权限许可和访问控制问题漏洞

Microsoft Visual Studio is a family of development tools from Microsoft Corporation, and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Vulnerability. The vulnerability stems from a lack of effective permission and access contro...

7.8CVSS5.6AI score0.00529EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/11/09 12:00 a.m.11 views

PT-2021-5162 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

7.8CVSS7.4AI score0.00529EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2021/11/03 3:12 p.m.51 views

Product Overview - Cynet Centralized Log Management

For most organizations today, the logs produced by their security tools and environments provide a mixed bag. On the one hand, they can be a trove of valuable data on security breaches, vulnerabilities, attack patterns, and general security insights. On the other, organizations don't have the rig...

6.6AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:00 a.m.7 views

VulnCheck KEV: CVE-2020-1147

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for...

7.8CVSS7.8AI score0.94347EPSS
SaveExploits10References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.37 views

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for...

7.8CVSS8.1AI score0.94347EPSS
SaveIn wildExploits10
Kitploit
Kitploit
added 2021/11/02 11:30 a.m.13 views

aDLL - Adventure of Dinamic Link Library

aDLL is abinary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities. The tool analyzes the image of the binary loaded in memory to search for DLLs loaded at load-time and makes use of the Microsoft Detours library to intercept calls to the LoadLibrary/LoadLibraryEx...

6.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.8 views

The vulnerability of the WaveImage() function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure due to insufficient checking of division by zero.

The vulnerability of the WaveImage function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a...

7.8CVSS6.8AI score0.02315EPSS
SaveExploits0References14Affected Software5
OSV
OSV
added 2021/11/01 4:15 a.m.7 views

ALPINE-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS7.2AI score0.12205EPSS
SaveExploits4References1
OSV
OSV
added 2021/11/01 4:15 a.m.3 views

DEBIAN-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS7AI score0.12205EPSS
SaveExploits4References1
OSV
OSV
added 2021/11/01 4:15 a.m.9 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS8.4AI score
SaveExploits0References18
Rows per page
Query Builder