Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftVisual Studio 2019*

26 matches found

CVE
CVE•added 2020/07/14 11:15 p.m.•1274 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

7.8CVSS8.1AI score0.92846EPSS
CVE
CVE•added 2020/09/15 10:15 a.m.•418 views

CVE-2020-8927

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli libr...

6.5CVSS6.6AI score0.00399EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•233 views

CVE-2019-1349

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

9.3CVSS9.2AI score0.23733EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•233 views

CVE-2019-1352

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.

9.3CVSS9.2AI score0.23733EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•209 views

CVE-2019-1354

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.

9.3CVSS9.2AI score0.23733EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•209 views

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

9.3CVSS8.7AI score0.10481EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•196 views

CVE-2019-1350

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

9.3CVSS9.2AI score0.23733EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•180 views

CVE-2019-1351

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

7.5CVSS8.3AI score0.17105EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•139 views

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

7.5CVSS7.3AI score0.08489EPSS
CVE
CVE•added 2020/12/10 12:15 a.m.•131 views

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.06315EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•121 views

CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

7.8CVSS6.7AI score0.00763EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•117 views

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an atta...

9.3CVSS7.9AI score0.04489EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•114 views

CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

7.8CVSS7.2AI score0.00694EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•111 views

CVE-2020-1202

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.

7.8CVSS8AI score0.00744EPSS
CVE
CVE•added 2020/05/21 11:15 p.m.•110 views

CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.03721EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•108 views

CVE-2020-0810

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially cr...

7.8CVSS8.6AI score0.00404EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•106 views

CVE-2020-1393

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.

7.8CVSS8AI score0.00709EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•102 views

CVE-2020-16874

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an atta...

9.3CVSS7.9AI score0.10178EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•95 views

CVE-2020-1257

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293.

7.8CVSS8.1AI score0.00694EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•95 views

CVE-2020-1293

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1278.

7.8CVSS8.1AI score0.00694EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•94 views

CVE-2020-1203

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1202.

7.8CVSS8AI score0.00744EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•85 views

CVE-2020-0793

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00377EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•85 views

CVE-2020-1278

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.

7.8CVSS8.1AI score0.00694EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•76 views

CVE-2020-0789

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.

7.1CVSS6.9AI score0.00304EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•74 views

CVE-2020-17100

Visual Studio Tampering Vulnerability

5.5CVSS5.4AI score0.00451EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•70 views

CVE-2020-0884

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.

4.3CVSS4.9AI score0.02187EPSS