Lucene search
+L

10406 matches found

Tenable Nessus
Tenable Nessus
added 2019/11/22 12:00 a.m.16 views

Microsoft Visual Studio Integrated Shell Installed

Binary data microsoftvsintshellinstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2019/11/20 12:00 a.m.10 views

JetBrains ReSharper DLL Hijacking Vulnerability

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. NET development. The program is mainly used for code quality analysis, code error alerts, etc. installers is the installation program for JetBrains ReSharper. This program is mainly used for co...

7.3CVSS7.1AI score0.00362EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/13 12:00 a.m.15 views

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2020-20382)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio that stems from the...

6.5CVSS6.8AI score0.03338EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/11/13 12:00 a.m.29 views

Security Updates for Microsoft Visual Studio Products (November 2019)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files. An attacker who successfully...

6.5CVSS6.5AI score0.03338EPSS
SaveExploits0References5
OSV
OSV
added 2019/11/12 7:15 p.m.10 views

CVE-2019-1425

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'...

6.5CVSS6.6AI score0.03338EPSS
SaveExploits0References1
NVD
NVD
added 2019/11/12 7:15 p.m.35 views

CVE-2019-1425

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'...

6.5CVSS6.5AI score0.03338EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.26 views

Privilege escalation

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'...

5.8CVSS6.5AI score0.03338EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2019/11/12 6:53 p.m.90 views

CVE-2019-1425

CVE-2019-1425 (Visual Studio Elevation of Privilege Vulnerability) : The issue arises when Visual Studio fails to properly validate hardlinks during extraction of archived files. Root cause is improper hardlink validation introduced via npm-packages (tar and fstream) used by Visual Studio. Exploi...

6.5CVSS6.4AI score0.03338EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/11/12 6:53 p.m.40 views

CVE-2019-1425

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'...

6.5AI score0.03338EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:00 a.m.48 views

Visual Studio Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files. An attacker who successfully exploited this vulnerability could overwrite arbitrary files in the security context of the local system. To exploit this...

6.5CVSS6.6AI score0.03338EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/11/12 12:00 a.m.44 views

KLA11607 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely ...

6.5CVSS6.3AI score0.03338EPSS
SaveExploits0References4
Symantec
Symantec
added 2019/11/12 12:00 a.m.38 views

Microsoft Visual Studio CVE-2019-1425 Remote Privilege Escalation Vulnerability

Description Microsoft Visual Studio is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio 2017 15.9 Microsoft Visual Studio 2019 16.0 Microsoft Visual Studio 2019 16.3 Recommendations...

0.1AI score0.03338EPSS
SaveExploits0Affected Software1
Symantec
Symantec
added 2019/11/05 12:00 a.m.80 views

SQLite CVE-2019-16168 Denial of Service Vulnerability

Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.29.0 and prior versions are vulnerable. Technologies Affected Oracle Communications Design Studio 7.3.4.3.0 Oracle Communications Design Studio...

4.3CVSS1AI score0.04253EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.10 views

The vulnerability of the Microsoft SQL Server Management Studio database management system, related to the improper assignment of permissions for files, allows a perpetrator to gain access to protected information.

The vulnerability of the Microsoft SQL Server Management Studio database management system is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

6.8CVSS5.6AI score0.05381EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/10/25 7:15 p.m.10 views

CVE-2019-17138

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS5AI score0.08158EPSS
SaveExploits0References2
NVD
NVD
added 2019/10/25 7:15 p.m.43 views

CVE-2019-17138

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS3.5AI score0.08158EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/25 7:15 p.m.28 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS3.9AI score0.08158EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/25 6:14 p.m.54 views

CVE-2019-17138

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS4AI score0.08158EPSS
SaveExploits0References2
CVE
CVE
added 2019/10/25 6:14 p.m.186 views

CVE-2019-17138

Foxit Studio Photo is affected by CVE-2019-17138 due to an out-of-bounds read during JPEG to EPS conversion. The issue stems from insufficient validation of user-supplied data, potentially allowing information disclosure and, in conjunction with other flaws, code execution in the target process. ...

4.3CVSS4AI score0.08158EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/10/23 10:15 p.m.24 views

CVE-2019-18213

XML Language Server aka lsp4xml before 0.9.1, as used in Red Hat XML Language Support aka vscode-xml before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF as well as SMB connection initiation that can lead to NetNTLM challenge/response captu...

8.8CVSS7.2AI score
SaveExploits0References6
Rows per page
Query Builder