10409 matches found
CVE-2019-6748
Foxit Studio Photo 3.6.6 (and prior) is affected by CVE-2019-6748 due to an out-of-bounds write in the EZI file parser that can lead to remote code execution. The vulnerability requires user interaction (target must open a malicious page/file). Root cause: improper validation during EZI file hand...
CVE-2019-6750
CVE-2019-6750 relates to Foxit Studio Photo 3.6.6 (and prior versions) with a flaw in the handling of EZI files. The issue is a write past the end of an allocated structure caused by insufficient validation of user-supplied data, enabling remote code execution in the context of the vulnerable pro...
CVE-2019-6747
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-6747
Foxit Studio Photo 3.6.6 is affected by CVE-2019-6747 due to an out-of-bounds write in the EZI file handling, enabling remote code execution when a user opens a malicious file or visits a crafted page. Root cause is lack of proper validation of user-supplied data, writing past the end of an alloc...
CVE-2019-6746
Foxit Studio Photo 3.6.6 (and earlier) is affected by a TIF file handling flaw that can disclose sensitive information due to a read past the end of an allocated structure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and, per the sources, could be l...
CVE-2019-6751
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6.779. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-6746
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2019-6751
CVE-2019-6751 affects Foxit Studio Photo 3.6.6.779 and earlier. The root cause is improper validation of user-supplied data in JPG handling, causing a write past the end of an allocated structure and enabling code execution in the current process when a user opens a malicious file or visits a cra...
CVE-2019-6749
Foxit Studio Photo is affected by an EZIX file parsing vulnerability that enables remote code execution. The flaw (CVE-2019-6749) arises from improper validation of user-supplied data in EZIX file handling, causing a write past the end of an allocated structure. Impact: attackers can execute code...
Security Updates for Microsoft Visual Studio Products (May 2019)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by an elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. CVE-2019-0727 C Tenable...
Privilege escalation
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...
CVE-2019-0727
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...
CVE-2019-0727
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...
CVE-2019-0727
CVE-2019-0727 describes an elevation-of-privilege flaw in the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, allowing an attacker who can log on to delete files in arbitrary locations. The vulnerability is rooted in the collectors’ handling of file deletion permissio...
CVE-2019-0727
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...
Server-Side Request Forgery (SSRF)
App Studio millicore is vulnerable to server-side request forgery SSRF attacks. An attacker could exploit a flaw in the externalrequest api call. This allows an attacker to probe the network internal resources, and access restricted endpoints which leads to a disclosure of information...
Cross-site Scripting (XSS)
RHMAP is vulnerable to cross-site-scripting XSS attacks. An attacker could exploit a flaw in the App Studio component which allows an attacker to use this flaw to execute a stored XSS attack on an application administrator using App Studio...
Security Update for the information disclosure vulnerability in Visual Studio 2015 Update 3 (KB4087371)
A remote code execution vulnerability exists in Visual Studio software when the software fails to check the source markup of a file for an unbuilt project. You can help protect your system by installing this update from Microsoft. This servicing release provides a security fix for this issue to...
Security Update for the Diagnostic Hub Standard Collector elevation of privilege vulnerability in Visual Studio 2015 Update 3 (KB4489639)
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations...
