10419 matches found
Directory traversal
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...
Directory traversal
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto3663.6.6.916.exe is used...
Out-of-bounds
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file...
CVE-2020-13813
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto3663.6.6.916.exe is used...
CVE-2020-13813
The CVE-2020-13813 entry affects Foxit Studio Photo prior to 3.6.6.922. A local privilege escalation is possible via a crafted DLL placed in the current working directory when FoxitStudioPhoto366_3.6.6.916.exe is executed. Affected component: Foxit Studio Photo (Windows). Root cause: DLL loading ...
CVE-2020-13812
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...
CVE-2020-13812
CVE-2020-13812 specifies a local privilege escalation in Foxit Studio Photo prior to 3.6.6.922 due to a crafted DLL placed in the current working directory, allowing a local user to gain higher privileges. The connected sources corroborate the affected product/version and the root cause (DLL in C...
CVE-2020-13811
CVE-2020-13811 affects Foxit Studio Photo prior to version 3.6.6.922. The issue is an out-of-bounds write triggered by a crafted TIFF file, indicating a memory boundary validation problem in TIFF handling. Documented impact includes potential control of affected memory regions; no public exploit ...
CVE-2020-13811
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file...
The vulnerability of the Python extension in the Microsoft Visual Studio software development environment allows a hacker to execute arbitrary code.
The vulnerability of the Python extension in the Microsoft Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2020-1192
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171...
CVE-2020-1192
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
CVE-2020-1171
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wi...
CVE-2020-1171
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192...
Remote code execution
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171...
Remote code execution
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192...
CVE-2020-1192 Visual Studio Code Python Extension Remote Code Execution Vulnerability
...
CVE-2020-1192
CVE-2020-1192 describes a remote code execution vulnerability in Visual Studio Code involving the Python extension loading workspace settings from a notebook file. The CVE is distinct from CVE-2020-1171. Public technical specifics (exact affected versions, root cause details, and patch/mitigation...
CVE-2020-1171
The CVE-2020-1171 entry describes a remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. The root cause is tied to the Python extension’s handling of configuration files, enabling code execution in the context of th...