DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Developer Tools: Mehrere Schwachstellen
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Azure DevOps Server, Microsoft NuGet, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Rechte zu erweitern und Daten zu manipulieren.
beschreibt (25)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-33141US | — | — | ||
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability | ||||
| CVE-2023-32030US | — | — | ||
.NET and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-29337US | — | — | ||
NuGet Client Remote Code Execution Vulnerability | ||||
| CVE-2023-29331US | — | — | ||
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-29326US | — | — | ||
.NET Framework Remote Code Execution Vulnerability | ||||
| CVE-2023-24936US | — | — | ||
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-24897US | — | — | ||
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-24895US | — | — | ||
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-33144US | — | — | ||
Visual Studio Code Spoofing Vulnerability | ||||
| CVE-2023-33139US | — | — | ||
Visual Studio Information Disclosure Vulnerability | ||||
| CVE-2023-33135US | high7.3 | — | ||
.NET and Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-33128US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-33126US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-32032US | — | — | ||
.NET and Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-29353US | — | — | ||
Sysinternals Process Monitor for Windows Denial of Service Vulnerability | ||||
| CVE-2023-21569US | — | — | ||
Azure DevOps Server Spoofing Vulnerability | ||||
| CVE-2023-21565US | — | — | ||
Azure DevOps Server Spoofing Vulnerability | ||||
| CVE-2023-29012US | high7.8 | — | ||
Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Uncontrolles Search Path… | ||||
| CVE-2023-29011US | high7.8 | — | ||
Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to SSH servers via proxies… | ||||
| CVE-2023-29007US | high7.8 | Exploit | ||
Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` fi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2023-3581 vom 2023-06-15external
- Red Hat Security Advisory RHSA-2023:3580 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3581 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3582 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3592 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3593 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:4448 vom 2023-08-03external
- Red Hat Security Advisory RHSA-2023:4449 vom 2023-08-03external
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan