WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product studio✕
Overview 585 matches · 33 in Waratek scope · 14 protected · 11 exploited · 3 CISA KEV · 45 public PoC · 16 EPSS ≥ 0.5
585matches 33in Waratek scope5.6% 14protected2.4% 11exploited1.9% 3CISA KEV0.5% 45public PoC7.7% 16EPSS ≥ 0.52.7%
Protected by Waratek 14 2.4% Rule in development 0 0.0% Mitigation candidate 1 0.2% No exploit published 18 3.1% Outside Waratek scope 5 0.9% Not applicable 547 93.5% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 585 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 14 2.4% partly blocked 0 0.0% not blocked 571 97.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 11 1.9% Working exploit published 37 6.3% Proof of concept only 17 2.9% Forecast only 3 0.5% No public exploit 517 88.4%
split by peak 86 / year
Not applicable: 547Outside Waratek scope: 5No exploit published: 18Mitigation candidate: 1Protected by Waratek: 14 High: 585 not blocked: 571blocked by ARMR today: 14 No public exploit: 517Forecast only: 3Proof of concept only: 17Working exploit published: 37Exploited: 11
20002 Not applicable2 High2 not blocked2 Working exploit published2 20011 Not applicable1 High1 not blocked1 No public exploit1 20020 20030 20043 Outside Waratek scope1 Not applicable2 High3 not blocked3 Working exploit published2 No public exploit1 20054 Not applicable4 High4 not blocked4 Exploited1 No public exploit3 20065 Not applicable5 High5 not blocked5 Working exploit published2 No public exploit3 20078 Not applicable8 High8 not blocked8 Exploited1 Working exploit published3 No public exploit4 200814 Not applicable14 High14 not blocked14 Exploited1 Working exploit published6 No public exploit7 200917 Not applicable17 High17 not blocked17 Exploited3 Working exploit published6 No public exploit8 20103 Not applicable3 High3 not blocked3 Working exploit published1 No public exploit2 201113 Not applicable13 High13 not blocked13 Working exploit published2 No public exploit11 20123 Not applicable3 High3 not blocked3 Working exploit published1 No public exploit2 20137 Not applicable7 High7 not blocked7 Working exploit published2 No public exploit5 20144 Not applicable4 High4 not blocked4 No public exploit4 20153 No exploit published1 Not applicable2 High3 not blocked3 No public exploit3 20164 Protected by Waratek1 Not applicable3 High4 blocked by ARMR today1 not blocked3 No public exploit4 20175 Outside Waratek scope1 Not applicable4 High5 not blocked5 No public exploit5 201822 Protected by Waratek1 Not applicable21 High22 blocked by ARMR today1 not blocked21 Working exploit published1 No public exploit21 201924 Protected by Waratek1 Outside Waratek scope1 Not applicable22 High24 blocked by ARMR today1 not blocked23 Working exploit published2 No public exploit22 202063 Protected by Waratek4 No exploit published5 Outside Waratek scope1 Not applicable53 High63 blocked by ARMR today4 not blocked59 Exploited1 Working exploit published1 No public exploit61 202173 Protected by Waratek2 No exploit published8 Not applicable63 High73 blocked by ARMR today2 not blocked71 Exploited2 Working exploit published1 Forecast only2 No public exploit68 202253 Protected by Waratek3 No exploit published3 Outside Waratek scope1 Not applicable46 High53 blocked by ARMR today3 not blocked50 Working exploit published1 Proof of concept only1 No public exploit51 202374 Protected by Waratek1 Mitigation candidate1 Not applicable72 High74 blocked by ARMR today1 not blocked73 Exploited2 Working exploit published2 Proof of concept only3 Forecast only1 No public exploit66 202460 Not applicable60 High60 not blocked60 Working exploit published1 Proof of concept only4 No public exploit55 202534 Protected by Waratek1 No exploit published1 Not applicable32 High34 blocked by ARMR today1 not blocked33 Working exploit published1 Proof of concept only2 No public exploit31 202686 Not applicable86 High86 not blocked86 Proof of concept only7 No public exploit79
200220052008201120142017202020232026
585 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 6 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96957 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96222 High 2026-10-13 Not applicable No public exploit Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70098 High 2026-10-13 Not applicable No public exploit Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-102235 High 2026-10-13 Not applicable No public exploit Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-102234 High 2026-10-13 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-102231 High 2026-10-13 Not applicable No public exploit Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-81383 High 2026-09-08 Not applicable No public exploit Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-81381 High 2026-09-08 Not applicable No public exploit Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-81379 High 2026-09-08 Not applicable No public exploit Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81378 High 2026-09-08 Not applicable No public exploit Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81357 High 2026-09-08 Not applicable No public exploit Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81356 High 2026-09-08 Not applicable No public exploit Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78462 High 2026-09-08 Not applicable No public exploit Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78461 High 2026-09-08 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-77907 High 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-77906 High 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-71328 High 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-70334 High 2026-09-08 Not applicable No public exploit Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-69806 High 2026-09-08 Not applicable No public exploit Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-69805 High 2026-09-08 Not applicable No public exploit External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69439 High 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62906 High 2026-09-03 Not applicable No public exploit Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
CVE-2026-70354 High 2026-08-11 Not applicable No public exploit Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-70336 High 2026-08-11 Not applicable No public exploit Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-70335 High 2026-08-11 Not applicable No public exploit Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
CVE-2026-69320 High 2026-08-11 Not applicable No public exploit Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-69306 High 2026-08-11 Not applicable No public exploit Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69278 High 2026-08-11 Not applicable No public exploit Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-62909 High 2026-08-11 Not applicable No public exploit Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-62901 High 2026-08-11 Not applicable No public exploit Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-62898 High 2026-08-11 Not applicable No public exploit Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-62897 High 2026-08-11 Not applicable No public exploit Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-62886 High 2026-08-11 Not applicable No public exploit Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-62871 High 2026-08-11 Not applicable No public exploit Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-59113 High 2026-08-11 Not applicable No public exploit Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-58650 High 2026-08-11 Not applicable No public exploit Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-17583 High 2026-08-05 Not applicable No public exploit The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
CVE-2026-9128 High 2026-07-14 Not applicable No public exploit A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. If exploited, an attacker could plant a malicious executable in a location within the search path, resulting in arbitrary code execution with the same permissions of the user running the application.
CVE-2026-9127 High 2026-07-14 Not applicable No public exploit A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
CVE-2026-57102 High 2026-07-14 Not applicable No public exploit Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-57101 High 2026-07-14 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-50651 High 2026-07-14 Not applicable No public exploit Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50649 High 2026-07-14 Not applicable No public exploit Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-50648 High 2026-07-14 Not applicable No public exploit Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50646 High 2026-07-14 Not applicable No public exploit Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50528 High 2026-07-14 Not applicable No public exploit Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-50527 High 2026-07-14 Not applicable No public exploit Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50526 High 2026-07-14 Not applicable No public exploit Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVE-2026-50525 High 2026-07-14 Not applicable No public exploit Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50524 High 2026-07-14 Not applicable No public exploit Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50520 High 2026-07-14 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
CVE-2026-47305 High 2026-07-14 Not applicable No public exploit Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.
CVE-2026-47303 High 2026-07-14 Not applicable No public exploit Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302 High 2026-07-14 Not applicable No public exploit Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47300 High 2026-07-14 Not applicable No public exploit Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-48140 High 2026-06-19 Not applicable No public exploit There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions.
CVE-2026-48139 High 2026-06-19 Not applicable No public exploit There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.
CVE-2026-48138 High 2026-06-19 Not applicable No public exploit There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.
CVE-2026-48569 High 2026-06-09 Not applicable No public exploit Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-47292 High 2026-06-09 Not applicable No public exploit Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
CVE-2026-45591 High 2026-06-09 Not applicable No public exploit Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-45482 High 2026-06-09 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-40376 High 2026-06-09 Not applicable No public exploit Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-41613 High 2026-05-12 Not applicable No public exploit Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-41611 High 2026-05-12 Not applicable No public exploit Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.
CVE-2026-41109 High 2026-05-12 Not applicable No public exploit Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-32177 High 2026-05-12 Not applicable No public exploit Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32203 High 2026-04-14 Not applicable No public exploit Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32178 High 2026-04-14 Not applicable No public exploit Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-5709 High 2026-04-06 Not applicable No public exploit Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.
CVE-2026-5708 High 2026-04-06 Not applicable No public exploit Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with AWS resources and services via a crafted API request. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.
CVE-2026-5707 High 2026-04-06 Not applicable No public exploit Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.
CVE-2024-14032 High 2026-04-06 Not applicable No public exploit Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unprotected XPC service. Attackers can invoke the installFromPath:toPath:withReply: method to overwrite system files and privileged binaries, achieving full system compromise. Twitch Studio was discontinued in May 2024.
CVE-2026-32106 High 2026-03-11 Not applicable Proof of concept only StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at or above your own rank. This inconsistency allows an admin to create additional admin accounts via the REST API, enabling privilege proliferation and persistence. This vulnerability is fixed in 0.4.3.
CVE-2026-32103 High 2026-03-11 Not applicable Proof of concept only StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the POST /studiocms_api/dashboard/create-reset-link endpoint allows any authenticated user with admin privileges to generate a password reset token for any other user, including the owner account. The handler verifies that the caller is an admin but does not enforce role hierarchy, nor does it validate that the target userId matches the caller's identity. Combined with the POST /studiocms_api/dashboard/reset-password endpoint, this allows a complete account takeover of the highest-privileged account in the system. This vulnerability is fixed in 0.4.3.
CVE-2026-32101 High 2026-03-11 Not applicable Proof of concept only StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized() function is declared async (returns Promise<boolean>) but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in JavaScript, !isAuthorized(type) always evaluates to false, completely bypassing the authorization check. Any authenticated user with the lowest visitor role can upload, delete, rename, and list all files in the S3 bucket. This vulnerability is fixed in 0.3.1.
CVE-2026-30945 High 2026-03-10 Not applicable No public exploit StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the DELETE /studiocms_api/dashboard/api-tokens endpoint allows any authenticated user with editor privileges or above to revoke API tokens belonging to any other user, including admin and owner accounts. The handler accepts tokenID and userID directly from the request payload without verifying token ownership, caller identity, or role hierarchy. This enables targeted denial of service against critical integrations and automations. This vulnerability is fixed in 0.4.0.
CVE-2026-30944 High 2026-03-10 Not applicable Proof of concept only StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms_api/dashboard/api-tokens endpoint allows any authenticated user (at least Editor) to generate API tokens for any other user, including owner and admin accounts. The endpoint fails to validate whether the requesting user is authorized to create tokens on behalf of the target user ID, resulting in a full privilege escalation. This vulnerability is fixed in 0.4.0.
CVE-2026-21523 High 2026-02-10 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
CVE-2026-21518 High 2026-02-10 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-21257 High 2026-02-10 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network.
CVE-2026-21256 High 2026-02-10 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2020-37162 High 2026-02-07 Not applicable Proof of concept only Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.
CVE-2020-37161 High 2026-02-07 Not applicable Proof of concept only Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
CVE-2026-21520 High 2026-01-22 Not applicable No public exploit Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
CVE-2026-22033 High 2026-01-12 Not applicable Proof of concept only Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site scripting (XSS) vulnerability exists in the custom_hotkeys functionality of the application. An authenticated attacker (or one who can trick a user/administrator into updating their custom_hotkeys) can inject JavaScript code that executes in other users’ browsers when those users load any page using the templates/base.html template. Because the application exposes an API token endpoint (/api/current-user/token) to the browser and lacks robust CSRF protection on some API endpoints, the injected script may fetch the victim’s API token or call token reset endpoints — enabling full account takeover and unauthorized API access.
CVE-2025-64660 High 2025-11-20 Not applicable No public exploit Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
CVE-2025-55240 High 2025-10-14 Not applicable No public exploit Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
CVE-2025-61692 High 2025-10-02 Not applicable No public exploit VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVE-2025-61691 High 2025-10-02 Not applicable No public exploit VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVE-2025-58777 High 2025-10-02 Not applicable No public exploit VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVE-2025-10492 High 2025-09-16 Protected by Waratek No public exploit A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
CVE-2025-54074 High 2025-08-13 Not applicable Proof of concept only Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth authorization server endpoints and trick victims into connecting it, leading to OS command injection in vulnerable clients. This issue has been patched in version 1.5.2.
CVE-2025-53773 High 2025-08-12 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.
CVE-2025-49739 High 2025-07-08 Not applicable No public exploit Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-6384 High 2025-06-19 No exploit published No public exploit Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution). This issue affects CrafterCMS: from 4.0.0 through 4.2.2.
CVE-2025-47959 High 2025-06-13 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.
CVE-2025-30399 High 2025-06-13 Not applicable No public exploit Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2025-47783 High 2025-05-14 Not applicable Working exploit published Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attacks. The vulnerability is reproducible when sending a properly formatted request to the `POST /projects/upload-example/` endpoint. In the source code, the vulnerability is located at `label_studio/projects/views.py`. Version 1.18.0 contains a patch for the issue.
CVE-2025-32702 High 2025-05-13 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
‹ prev page 1 of 6 next ›