CVE-2021-31433

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31433. The root cause is improper validation during ARW file parsing, causing a write past the end of an allocated data structure. This enables remote code execution in the context of the current process, with user interaction required (target ...

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Visual Studio Code Python Extension Remote Code Execution

A remote code execution vulnerability exists in Visual. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Foxit Studio Photo Code Execution Vulnerability (CNVD-2021-31755)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo, which can be exploited by remote attackers to execute arbitrary code on an affected Foxit Studio Photo installation...

Foxit Studio Photo Out-of-Bounds Write Vulnerability (CNVD-2021-34118)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An out-of-bounds write vulnerability exists in Foxit Studio Photo version 3.6.6.931 when parsing JP2 files. The vulnerability stems from the program not properly validating user input. An attacker could...

Unisys Data Exchange Management Studio Cross-Site Scripting Vulnerability

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...

Foxit Studio Photo Out-of-Bounds Write Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An out-of-bounds write vulnerability exists in Foxit Studio Photo version 3.6.6.931 when parsing JPM files. The vulnerability stems from the program not properly validating user input. An attacker can...

Foxit Studio Photo Code Execution Vulnerability (CNVD-2021-31754)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo, which can be exploited by remote attackers to execute arbitrary code on an affected Foxit Studio Photo installation...

Foxit Studio Photo Heap Buffer Overflow Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo, which can be exploited by remote attackers to execute arbitrary code on an affected Foxit Studio Photo installation...

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2021-34117)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in Foxit Studio Photo version 3.6.6.931, which can be exploited by a remote attacker to execute arbitrary code on an affected Foxit Studio Photo installation...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

CVE-2020-35542 affects Unisys Data Exchange Management Studio prior to or up to 5.0.34. The root cause is input not being sanitized/cleared from HTML document fields, enabling a cross-site scripting (XSS) vulnerability. Affected component: HTML input handling within the product’s UI; impact is us...

Unisys Data Exchange Management Studio 跨站脚本漏洞

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in code generation control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in code generation control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio Code Kubernetes Tools Extension relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code Kubernetes Tools Extension relates to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created malicious content...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the extension for the Microsoft Visual Studio Code – Maven for Java Extension (vscode-maven) relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the extension for the Microsoft Visual Studio Code – Maven for Java Extension vscode-maven is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted request...