10392 matches found
CVE-2018-18689
CVE-2018-18689 describes a Signature Wrapping issue in PDF signature validation caused by missing guidance in the PDF spec, allowing attackers to manipulate /ByteRange and xref without detection. The vulnerability affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4, as ...
CVE-2018-18689
The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...
CVE-2018-18688
The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...
The vulnerability of the SSH protocol used by the code editor Visual Studio Code, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of the SSH protocol used by the code editor Visual Studio Code is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Language Support component of the Microsoft Visual Studio Code Java Extension, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Language Support component in the Microsoft Visual Studio Code Java Extension package is related to improper code generation management. Exploiting this vulnerability may allow an attacker to execute arbitrary code...
The vulnerability of the TSLint code analyzer in Visual Studio Code, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of the TSLint code analyzer in the Visual Studio Code editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Microsoft Visual Studio software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio Code Java Extension relates to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerabilities of the information protection systems Secret Net and Secret Net Studio allow attackers to disrupt the proper functioning of information protection systems, potentially bypassing certain security components.
The vulnerability of the kernel driver sncc0.sys of the Secret Net information protection system and Secret Net Studio relates to the ability to obtain information and affect internal objects such as a list of active protection components. Exploiting this vulnerability allows a malicious actor to...
Description of Visual Studio 2010 Service Pack 1
Describes information about Visual Studio 2010 Service Pack 1 SP1. Additionally, this article lists the fixed issues and added technology enhancements in Visual Studio 2010 SP1.NoticeSome of the downloads that are mentioned in this article are currently available on My.VisualStudio.com. This...
Launching a New Game Studio and Planning for Growth
So, you're starting your own game studio. This is an incredible opportunity! You and your team get to start fresh and build the game of your dreams! But, let's be honest, if you have just founded your own game studio, odds are that you're not a technical architect. You may have some technical...
Launching a New Game Studio and Planning for Growth
So, you're starting your own game studio. This is an incredible opportunity! You and your team get to start fresh and build the game of your dreams! But, let's be honest, if you have just founded your own game studio, odds are that you're not a technical architect. You may have some technical...
Android Studio Privilege Escalation
Video and POC here : https://www.youtube.com/watch?v=hAPkSGxh9H0 When you open a project in android studio, if gradle-wrapper.properties set distributionUrl=https:// services.gradle.org/distributions/gradle-2.6-all.zip , then android studio will download and extract gradle-2.6-all.zip, jar file i...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...
Imagemagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2021-25968)
Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A resource management error vulnerability exists in versions of ImageMagick prior to...
Microsoft Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio. An attacker could exploit t...
Microsoft Visual Studio Code Execution Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle.Git for Visual Studio is one of the Git Distributed Version Control Git for Visual Studio i...
CVE-2020-17150
Visual Studio Code Remote Code Execution Vulnerability...
