Page 4 of 40 results (0.006 seconds)

CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0

CVE-2019-0872

https://notcve.org/view.php?id=CVE-2019-0872

16 May 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979. Existe una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no se hace un saneamiento adecuado para la entrada suministrada por el usuario, también se conoce como 'Azure DevOps Ser... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0872 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 0

CVE-2019-0875

https://notcve.org/view.php?id=CVE-2019-0875

09 Apr 2019 — An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'. Existe una vulnerabilidad de elevación de privilegios cuando Azure DevOps Server 2019 no aplica apropiadamente los permisos del proyecto, también se conoce como “Azure DevOps Server Elevation of Privilege Vulnerability”. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0875 •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2019-0870

https://notcve.org/view.php?id=CVE-2019-0870

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0871. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiadamente en la entrada provista por el u... • http://www.securityfocus.com/bid/107754 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-0869

https://notcve.org/view.php?id=CVE-2019-0869

09 Apr 2019 — A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'. Se presenta una vulnerabilidad de suplantación de identidad en Microsoft Azure DevOps Server cuando no logra manejar apropiadamente las peticiones web, también se conoce como "Azure DevOps Server HTML Injection Vulnerability". • http://www.securityfocus.com/bid/107768 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-0874

https://notcve.org/view.php?id=CVE-2019-0874

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'. Se presenta una vulnerabilidad de tipo Cross-Site Scripting (XSS) cuando Azure DevnOps Server no sanea apropiadamente la entrada proporcionada por el usuario, también se conoce como "Azure DevOps Server Cross-site Scripting Vulnerability". • http://www.securityfocus.com/bid/107759 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2019-0871

https://notcve.org/view.php?id=CVE-2019-0871

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0870. Se presenta una vulnerabilidad de tipo Cross-Site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiadamente en la entrada provista por el u... • http://www.securityfocus.com/bid/107755 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2019-0868

https://notcve.org/view.php?id=CVE-2019-0868

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0870, CVE-2019-0871. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiadamente en la entrada provista por el u... • http://www.securityfocus.com/bid/107753 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 5EXPL: 0

CVE-2019-0866

https://notcve.org/view.php?id=CVE-2019-0866

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiado en la entrada provista por el usuari... • http://www.securityfocus.com/bid/107749 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-0867

https://notcve.org/view.php?id=CVE-2019-0867

09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiadamente en la entrada provista por el u... • http://www.securityfocus.com/bid/107752 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 16%CPEs: 1EXPL: 0

CVE-2019-0857

https://notcve.org/view.php?id=CVE-2019-0857

09 Apr 2019 — A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Spoofing Vulnerability'. Una vulnerabilidad de suplantación podría permitir la omisión de una característica de seguridad cuando Azure DevOps Server no sanea correctamente la entrada proporcionada por el usuario, también se conoce como "Azure DevOps Server Spoofing Vulnerability". • http://www.securityfocus.com/bid/107760 • CWE-116: Improper Encoding or Escaping of Output •