Microsoft ≫ Powershell

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.