11055 matches found
Users can recover already burned gobblers after minting a legendary gobbler.
Lines of code Vulnerability details Impact Users can recover already burned gobblers after minting a legendary gobbler. The main flaw is that it doesn't reset getApprovedid here. As a result, users can have more emissionMultiple than they should by recovering the burned gobblers. Proof of Concept...
Vim src/undo.c Heap Buffer Overflow DoS
The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...
Security Bulletin: Cross-site scripting security vulnerability exists in IBM Eclipse Help System used in IBM Security zSecure Visual (CVE-2013-5449)
Abstract IBM Security zSecure Visual uses the IBM Eclipse Help System IEHS to provide product information center for end users. A cross site scripting vulnerability exists in IEHS. Content VULNERABILITY DETAILS CVE ID: CVE-2013-5449 DESCRIPTION: A remote attacker might exploit this vulnerability...
Microsoft Visual Studio Code Remote Code Execution (CVE-2021-27084)
A remote code execution vulnerability exists in the Maven for Java Extension for Microsoft Visual Studio Code. The vulnerability is due to a design weakness. A remote attacker can exploit this vulnerability by enticing a user to open a maliciously crafted Java Maven project folder...
CVE-2022-38808
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...
CVE-2022-38808: Improper Neutralization of Special Elements used in an SQL Command
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...
PT-2022-24577
Name of the Vulnerable Software and Affected Versions ywoa version 6.1 Description The issue is related to SQL Injection via the "backend/oa/visual/exportExcel.do" interface. This allows for potential exploitation. No information is provided about the estimated number of potentially affected...
Fedora: Security Advisory for vim (FEDORA-2022-b9edf60581)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Oracle Linux 8 : .NET / 6.0 (ELSA-2022-6539)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6539 advisory. 6.0.109-1.0.1 - Add missing Oracle RIDs 6.0.109-1 - Update to .NET SDK 6.0.109 and Runtime 6.0.9 - Resolves: RHBZ2123789 Tenable has extracted the preceding...
Security Updates for Microsoft Visual Studio Products (Sep 2022)
A denial of service DoS vulnerability exists in Visual Studio. An authenticated, remote attacker can exploit this issue, to cause the system to stop responding. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Oracle Linux 9 : .NET / 6.0 (ELSA-2022-6521)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6521 advisory. 6.0.109-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.109-1 - Update to .NET SDK 6.0.109 and Runtime 6.0.9 -...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
[SECURITY] Fedora 37 Update: vim-9.0.412-1.fc37
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Microsoft Visual Studio Denial of Service Vulnerability (Sep 2022) - Mac OS X
The host is missing an important security update according to Microsoft Visual Studio September 2022 update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Security Update for Microsoft Visual Studio Code (September 2022)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.17.1 It is, therefore, affected by privilege escalation vulnerability. An authenticated, local attacker can exploit this to escalate their privileges of an affected system to that of another user of Visual Stud...
CVE-2022-38013
.NET Core and Visual Studio Denial of Service Vulnerability...
