10419 matches found
CVE-2020-15629
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
reframingstudio.com Cross Site Scripting vulnerability OBB-1265798
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-1455
A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...
CVE-2020-1455
A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...
CVE-2020-0604
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
CVE-2020-0604
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Remote code execution
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Denial of service
A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...
CVE-2020-1455
CVE-2020-1455 affects Microsoft SQL Server Management Studio (SSMS). Reports indicate a Denial of Service condition when SSMS improperly handles files. Exploitation requires initial access (execution on the target system). Public details from MSRC and corroborating third-party sources show the is...
CVE-2020-0604 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2020-0604
CVE-2020-0604 is a Visual Studio Code remote code execution vulnerability. According to provided documents, it occurs when VS Code processes environment variables after opening a project, allowing attacker-supplied code to run in the targeted user’s context if they clone a repository and open it ...
Security Updates for SQL Server Management Studio (August 2020)
The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploi...
Microsoft Visual Studio Code Code Execution Vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability by tricking a user into copying a repository and opening it in Visual Studio Code to run arbitrar...
Visual Studio Code Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
PT-2020-3658 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when Visual Studio Code processes environment variables after opening a project. An attacker who successfully exploits this could run arbitra...
KLA11934 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET Core can be exploit...
Security Updates for Microsoft Visual Studio Products (August 2020)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by a denial-of-service vulnerability: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...
Security Update for Microsoft Visual Studio Code Maven Extension (August 2020)
An input-validation flaw exists in Visual Studio Code Maven Extension related to processing environment variables after opening a project that allows remote code execution. An attacker can convince a user to clone a specified repository and to open it in Visual Studio Code leading to code...
Foxit Studio Photo < 3.6.6.925 Out-of-Bounds Read Vulnerability
According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the use of PNG files to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, to disclose...
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...