Lucene search
+L

570 matches found

CNNVD
CNNVD
•added 2021/03/24 12:00 a.m.•20 views

Xavier Hahn vscode-matlab 默认配置问题漏洞

Xavier Hahn vscode-matlab is an open source application by Xavier Hahn. MATLAB extension before 2.0.1 suffers from a Default Configuration Issue vulnerability that can be exploited by an attacker to execute arbitrary code via a crafted workspace...

9.8CVSS8.8AI score0.0203EPSS
SaveExploits0References5
NVD
NVD
•added 2021/03/22 7:15 a.m.•32 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS0.01539EPSS
SaveExploits0References4
OSV
OSV
•added 2021/03/22 7:15 a.m.•21 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS7.6AI score
SaveExploits0References4
Prion
Prion
•added 2021/03/22 7:15 a.m.•21 views

Code injection

UNSUPPORTED WHEN ASSIGNED The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

6.8CVSS8.8AI score0.01539EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/03/22 7:15 a.m.•11 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS8.4AI score0.01539EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/03/22 6:11 a.m.•33 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

9.1AI score0.01539EPSS
SaveExploits0References4
CVE
CVE
•added 2021/03/22 6:11 a.m.•57 views

CVE-2021-28956

The CVE-2021-28956 entry covers the unofficial vscode-sass-lint extension for Visual Studio Code, vulnerable through version 1.0.7. The root issue enables an attacker to cause execution of arbitrary binaries when a user opens a crafted workspace. The affected component is the vscode-sass-lint ext...

8.8CVSS8.8AI score0.01539EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2021/03/22 6:11 a.m.•0 views

CVE-2021-28956

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS0.01539EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/22 12:00 a.m.•4 views

CVE-2021-28956: Undefined Security Weakness

The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS6.4AI score0.01539EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/19 12:00 a.m.•16 views

vscode-swiftlint code execution vulnerability

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS7.9AI score0.01678EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/18 12:00 a.m.•17 views

vscode-shellcheck 安全漏洞

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

9.8CVSS6.3AI score0.01831EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2021/02/14 2:01 p.m.•128 views

Exploit for CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https...

7.8CVSS7.8AI score0.06003EPSS
SaveExploits2
CNVD
CNVD
•added 2020/06/23 12:00 a.m.•20 views

GitLab gitlab-vscode-extension injection vulnerability

GitLab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from GitLab USA. A security vulnerability exists in GitLab gitlab-vscode-extension version v2.2.0. An attacker can exploit the vulnerability to execute code on a user's system...

8.6CVSS7AI score0.01201EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/22 4:15 p.m.•41 views

CVE-2020-13279

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

8.6CVSS0.01201EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/22 4:15 p.m.•36 views

CVE-2020-13279

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

8.6CVSS7.5AI score
SaveExploits0References2
Prion
Prion
•added 2020/06/22 4:15 p.m.•31 views

Code injection

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

6.8CVSS8.8AI score0.01201EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/06/22 3:11 p.m.•54 views

CVE-2020-13279

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

8.6CVSS8.8AI score0.01201EPSS
SaveExploits0References2
Mend
Mend
•added 2020/06/22 3:11 p.m.•2 views

CVE-2020-13279

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

9.3CVSS0.01201EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/22 12:00 a.m.•1 views

PT-2020-13420

Name of the Vulnerable Software and Affected Versions gitlab-vscode-extension version 2.2.0 Description The issue allows for client-side code execution, enabling an attacker to execute code on a user's system. Recommendations For gitlab-vscode-extension version 2.2.0, update to a version that...

8.6CVSS0.01201EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/22 12:00 a.m.•7 views

CVE-2020-13279: Uncontrolled Search Path Element

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system...

8.6CVSS6.3AI score0.01201EPSS
SaveExploits0References2
Rows per page
Query Builder