10419 matches found
CVE-2019-19102
CVE-2019-19102 is a directory traversal (zip slip) vulnerability in SharpZipLib used by the upgrade service of B&R Automation Studio, affecting 4.0.x–4.2.x. It allows unauthenticated writers to create/overwrite files in local directories. CVSSv3.1 base score 7.5 (I:H) per NVD; base 5.5–5.0 in oth...
CVE-2019-19101
CVE-2019-19101 concerns a TLS validation flaw in the B&R Automation Studio upgrade service that allows unauthenticated users to perform MITM attacks via the upgrade server. Affected products: Automation Studio versions 4.0.x, 4.1.x, 4.2.x, and older builds prior to 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6...
CVE-2019-19101 Incomplete communication encryption and validation in B&R Automation Studio upgrade service
A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...
Foxitsoftware Foxit Studio Photo Remote Code Execution (CVE-2020-8878)
A remote code execution vulnerability exists in foxitsoftware foxit studio photo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ask.clip-studio.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1150730 Security Researcher ftLoic Helped patch 157 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ask.clip-studio.com website a...
Microsoft Visual Studio Privilege Mobilization Vulnerability (CNVD-2020-24130)
Microsoft Visual Studio is a family of development tool suites from Microsoft and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. A lift vulnerability exists in Microsoft Visual Studio that stems from a failure of the Updater...
Microsoft Visual Studio Extension Installer Service Elevation of Privilege Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio Extension Installer Servic...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'...
CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'...
CVE-2020-0900
CVE-2020-0900 describes an elevation of privilege vulnerability in the Visual Studio Extension Installer Service caused by improper handling of file operations. An attacker with local access could log on and run a specially crafted application to exploit this flaw. Microsoft’s MSRC advisory and t...
CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
CVE-2020-0899
CVE-2020-0899 describes an elevation of privilege in Microsoft Visual Studio updater service caused by improper handling of file permissions. An attacker who can log on to the system and exploit this flaw could write/overwrite files in the security context of the local system, potentially leading...
Visual Studio 2005 Service Pack 1 Release Notes
Contains the contents of the Release Notes from Visual Studio 2005 Service Pack 1 SP1.SummaryThis document lists known issues with the installation and uninstallation of Visual Studio 2005 Service Pack 1 SP1, and with Visual Studio 2005 SP1 features. For information about the functional changes...
April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit
Microsoft has released its April 2020 Patch Tuesday security updates, its first big patch update released since the work-from-home era truly got underway. It’s a doozie, with the tech giant disclosing 113 vulnerabilities. Out of these, 19 are rated as critical, and 94 are rated as important...