https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:40:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06316 bdu:2025-06316 https://cve.radiocsirt.org/vuln/bdu:2025-06316 https://cve.radiocsirt.org/vuln/euvd-2026-273135 EUVD-2026-273135 https://cve.radiocsirt.org/vuln/euvd-2026-273135 https://cve.radiocsirt.org/vuln/fkie_cve-2025-29813 <p>Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.</p> <p>Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-29813 https://cve.radiocsirt.org/vuln/ghsa-jhcc-gwm2-46v7 <p>An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully exploited this vulnerability could extend their access to a project. To exploit this vulnerability, an attacker would first have to have access to the project and swap the short-term token for a long-term one. The update addresses the vulnerability by correcting how the Visual Studio updater handles these tokens.</p> <p>An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully exploited this vulnerability could extend their access to a project. To exploit this vulnerability, an attacker would first have to have access to the project and swap the short-term token for a long-term one. The update addresses the vulnerability by correcting how the Visual Studio updater handles these tokens.</p> https://cve.radiocsirt.org/vuln/ghsa-jhcc-gwm2-46v7 https://cve.radiocsirt.org/vuln/msrc_cve-2025-29813 msrc_CVE-2025-29813 https://cve.radiocsirt.org/vuln/msrc_cve-2025-29813 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1015 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft Azure DevOps und Microsoft .NET Framework ausnutzen, um seine Privilegien zu eskalieren, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, beliebigen Programmcode auszuführen oder Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft Azure DevOps und Microsoft .NET Framework ausnutzen, um seine Privilegien zu eskalieren, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, beliebigen Programmcode auszuführen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1015