172 matches found
Remote code execution
Raw Image Extension Remote Code Execution Vulnerability...
Information disclosure
Microsoft Raw Image Extension Information Disclosure Vulnerability...
CVE-2020-17081
CVE-2020-17081 affects Microsoft Raw Image Extension and is described as an information disclosure vulnerability. Public CNVD entry indicates this vulnerability affects versions prior to Raw Image Extension 1.0.32861.0. A PT-Security advisory for the same Microsoft Raw Image Extension claims a bu...
CVE-2020-17081 Microsoft Raw Image Extension Information Disclosure Vulnerability
...
CVE-2020-17079 Raw Image Extension Remote Code Execution Vulnerability
...
CVE-2020-17078 Raw Image Extension Remote Code Execution Vulnerability
...
CVE-2020-17078 Raw Image Extension Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
PT-2020-4820 · Microsoft · Heif Image Extension
Name of the Vulnerable Software and Affected Versions: HEIF Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the HEIF Image Extension, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...
PT-2020-4761 · Microsoft · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. It can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment,...
PT-2020-4870 · Microsoft · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin. Exploitation of this issue may allow a remote attacker to execute arbitrary code...
PT-2020-4871 · Microsoft · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow, which can be exploited by a remote attacker using a specially crafted file to execute arbitrary code. Recommendations: At the moment,...
PT-2020-4863 · Microsoft · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Microsoft Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the MSRawImage Store Raw2Image plugin of the Raw Image Extension. Exploitation of this issue may allow a remote attacker t...
PT-2020-4762 · Microsoft · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. This could allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...
CVE-2020-26048
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...
Design/Logic Flaw
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...
CVE-2020-26048
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...