570 matches found
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
CVE-2021-30502
The CVE-2021-30502 entry concerns the unofficial vscode-ghc-simple (Simple Glasgow Haskell Compiler) extension for Visual Studio Code. Affected component: the extension’s workspace configuration handling via replCommand, which allows remote code execution. Impact: high/severe due to remote code e...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
PT-2021-18765
Name of the Vulnerable Software and Affected Versions vscode-ghc-simple extension versions prior to 0.2.3 Description The issue allows remote code execution via a crafted workspace configuration with replCommand. This can be exploited by an attacker to execute malicious code. Recommendations For...
CVE-2021-30502: Undefined Security Weakness
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
vscode-ghc-simple 安全漏洞
vscode-ghc-simple is a software application. A quick fix operation is provided. A security vulnerability exists in vscode-ghc-simple. The vulnerability allows remote code execution via a manual workspace configuration using replCommand...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
Improper access control
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
The issue CVE-2021-28793 affects vscode-restructuredtext prior to 146.0.0. An incorrect access control allows a crafted project folder to cause arbitrary binaries to run via a crafted workspace configuration. Multiple sources (Red Hat, CNVD, NVD OSV) corroborate the vulnerability and its impact. ...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
PT-2021-17919
Name of the Vulnerable Software and Affected Versions: vscode-restructuredtext versions prior to 146.0.0 Description: The issue is related to an incorrect access control vulnerability. A crafted project folder could potentially execute arbitrary binaries via a crafted workspace configuration...
CVE-2021-28793: Incorrect Authorization
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-22539
An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...
CVE-2021-22539
An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint .bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recomme...