CVE-2020-17081

CVE-2020-17081 affects Microsoft Raw Image Extension and is described as an information disclosure vulnerability. Public CNVD entry indicates this vulnerability affects versions prior to Raw Image Extension 1.0.32861.0. A PT-Security advisory for the same Microsoft Raw Image Extension claims a bu...

CVE-2020-17081 Microsoft Raw Image Extension Information Disclosure Vulnerability

...

CVE-2020-17079 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2020-17078 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2020-17078 Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

PT-2020-4820 · Microsoft · Heif Image Extension

Name of the Vulnerable Software and Affected Versions: HEIF Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the HEIF Image Extension, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...

PT-2020-4761 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. It can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment,...

PT-2020-4871 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow, which can be exploited by a remote attacker using a specially crafted file to execute arbitrary code. Recommendations: At the moment,...

PT-2020-4870 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

PT-2020-4863 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the MSRawImage Store Raw2Image plugin of the Raw Image Extension. Exploitation of this issue may allow a remote attacker t...

PT-2020-4762 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. This could allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

CVE-2020-26048

The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...

Design/Logic Flaw

The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...

CVE-2020-26048

The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...

Microsoft Windows WebP Image Extension RCE (August 2020)

The Windows 'WebP Image Extension' or 'WebP from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this vulnerability via an specially crafted image to execute code and gain control of the...

CVE-2019-9581

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension...