10392 matches found
Denial of service
A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...
CVE-2020-1455
CVE-2020-1455 affects Microsoft SQL Server Management Studio (SSMS). Reports indicate a Denial of Service condition when SSMS improperly handles files. Exploitation requires initial access (execution on the target system). Public details from MSRC and corroborating third-party sources show the is...
CVE-2020-0604 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2020-0604
CVE-2020-0604 is a Visual Studio Code remote code execution vulnerability. According to provided documents, it occurs when VS Code processes environment variables after opening a project, allowing attacker-supplied code to run in the targeted user’s context if they clone a repository and open it ...
Security Updates for SQL Server Management Studio (August 2020)
The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploi...
Microsoft Visual Studio Code Code Execution Vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability by tricking a user into copying a repository and opening it in Visual Studio Code to run arbitrar...
Visual Studio Code Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
PT-2020-3658 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when Visual Studio Code processes environment variables after opening a project. An attacker who successfully exploits this could run arbitra...
KLA11934 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET Core can be exploit...
Security Updates for Microsoft Visual Studio Products (August 2020)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by a denial-of-service vulnerability: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...
Security Update for Microsoft Visual Studio Code Maven Extension (August 2020)
An input-validation flaw exists in Visual Studio Code Maven Extension related to processing environment variables after opening a project that allows remote code execution. An attacker can convince a user to clone a specified repository and to open it in Visual Studio Code leading to code...
Foxit Studio Photo < 3.6.6.925 Out-of-Bounds Read Vulnerability
According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the use of PNG files to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, to disclose...
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the insufficient data validation when opening a project, allowing a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the insufficient data validation when opening a project. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft Visual Studio, a software development tool, and Visual Studio Code, a code editor, stems from deficiencies in access control. These flaws allow attackers to escalate their privileges and execute arbitrary code.
The vulnerability of Microsoft Visual Studio, a software development tool, and Visual Studio Code, a code editor, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2020-2654)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-26...
Microsoft Visual Studio Code ESLint Extention Command Injection Vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A command injection vulnerability exists in Microsoft Visual Studio Code ESLint Extention. An attacker can exploit this vulnerability to run arbitrary code in the context of the current user...
Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-65179)
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PNG files in Foxit Studio Photo 3.6.6.924 and earlier versions for Windows platforms, which stems from the program not properly validating...
The vulnerability of the Microsoft .NET Framework software platform, Microsoft Visual Studio for software development, and Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages, related to errors in processing XML requests, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...