Lucene search
+L

9148 matches found

Positive Technologies
Positive Technologies
added 2020/07/14 12:00 a.m.9 views

PT-2020-3077

Name of the Vulnerable Software and Affected Versions .NET Framework versions prior to the fixed version Microsoft SharePoint versions prior to the fixed version Visual Studio versions prior to the fixed version Description A remote code execution issue exists due to the software's failure to...

10CVSS8.7AI score0.94347EPSS
SaveExploits10References51
Positive Technologies
Positive Technologies
added 2020/07/14 12:00 a.m.9 views

PT-2020-3300 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: ESLint extension for Visual Studio Code affected versions not specified Description: A remote code execution issue exists in the ESLint extension for Visual Studio Code. This occurs when the extension validates source code after a project is...

9.3CVSS8.5AI score0.23563EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2020/07/14 12:00 a.m.9 views

PT-2020-3185 · Microsoft · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Visual Studio Code affected versions not specified Description: The issue is related to an elevation of privilege vulnerability when loading software dependencies. This vulnerability can allow an...

9.3CVSS9.1AI score0.05862EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:00 a.m.85 views

Security Update for Microsoft Visual Studio Code (CVE-2020-1416)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.47.1. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies. A local...

9.3CVSS8.2AI score0.05862EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2020/07/08 7:49 a.m.11 views

visualconnections.com Cross Site Scripting vulnerability OBB-1218654

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
OSV
OSV
added 2020/06/29 2:15 p.m.9 views

CVE-2019-19160

Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure filerxp...

8.8CVSS7.8AI score0.00583EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.13 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.9AI score0.07175EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.12 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.3AI score0.0314EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.15 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.3AI score0.0314EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.17 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.3AI score0.03099EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.9 views

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.00785EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.10 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.9AI score0.07175EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/06/23 12:00 a.m.42 views

Security Update for Microsoft Visual Studio Code Live Share Extension (June 2020)

An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text. To exploit the vulnerability, an attacker would need to perform a successful capture of the tokens from client to proxy, where specific proxy settings are being used,...

5.9CVSS6.7AI score0.02826EPSS
SaveExploits0References4
CVE
CVE
added 2020/06/22 3:11 p.m.75 views

CVE-2020-13279

CVE-2020-13279 concerns a vulnerability in the GitLab GitLab-vscode-extension, specifically version v2.2.0 , described as a client-side code execution issue that could allow an attacker to run code on a user’s system. Connected sources corroborate the affected product and scenario, with CVSS metr...

8.6CVSS8.8AI score0.01201EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:00 a.m.13 views

The vulnerability of the OpenOffice office suite is related to errors in applying Visual Basic for Applications (VBA) macros for security settings. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to errors in applying macros’ security settings in Visual Basic for Applications VBA. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.9CVSS5.4AI score0.08127EPSS
SaveExploits1References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.15 views

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00889EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.11 views

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00889EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:00 a.m.13 views

The vulnerability of Visual Studio Code’s source editor on Microsoft Windows operating systems stems from vulnerabilities related to access control. These vulnerabilities allow attackers to escalate their privileges.

The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.04136EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2020/06/10 12:00 a.m.13 views

Microsoft Visual Studio Code Information Disclosure Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. An information disclosure vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability to obtain a token by performing a man-in-the-middle attack...

5.9CVSS6.2AI score0.02826EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/09 8:15 p.m.36 views

CVE-2020-1343

An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability'...

5.9CVSS0.02826EPSS
SaveExploits0References1
Rows per page
Query Builder