10407 matches found
PT-2023-14293 · Arm · Arm Compiler 5 (Ac5) +11
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue arises when the installation directory lacks sufficiently restrictive file permissions, allowing an attacker to modify files and execute malicious code. Recommendations: At the...
SUSE: Security Advisory (SUSE-SU-2023:3001-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for kernel (FEDORA-2023-3661f028b8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vasion PrinterLogic Client 安全漏洞
Vasion PrinterLogic Client is a print management solution from Vasion. A security vulnerability exists in Vasion PrinterLogic Client Windows versions prior to 25.0.0.818, which stems from a binary file that can be executed from a subfolder in C:WindowsTemp during installation...
Path Traversal
github.com/nothub/mrpack-install is vulnerable to Path Traversal. The vulnerability exists because it does not properly validate downloaded files for subpaths, which allows an attacker to access files outside the restricted directory...
Fedora: Security Advisory for mingw-nsis (FEDORA-2023-dfb6cc599f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass. Under rare conditions, a restart of Umbraco can allow unauthorized users to gain admin-level permissions. Workaround 1 Enabling the Unattended Install feature will mean the vulnerability is not exploitable. 2...
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
Under rare conditions, a restart of Umbraco can allow unauthorized users to gain admin-level permissions. Impact An unauthorized user gaining admin-level access and permissions to the backoffice. Patches 10.6.1, 11.4.2, 12.0.1 Workarounds Enabling the Unattended Install feature will mean the...
GHSA-H8WC-R4JH-MG7M Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
Under rare conditions, a restart of Umbraco can allow unauthorized users to gain admin-level permissions. Impact An unauthorized user gaining admin-level access and permissions to the backoffice. Patches 10.6.1, 11.4.2, 12.0.1 Workarounds Enabling the Unattended Install feature will mean the...
[SECURITY] Fedora 37 Update: mingw-nsis-3.09-1.fc37
NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...
CVE-2023-21257
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2023-25870 · Umbraco · Umbraco
Name of the Vulnerable Software and Affected Versions: Umbraco versions prior to 10.6.1 Umbraco versions prior to 11.4.2 Umbraco versions prior to 12.0.1 Description: Under rare conditions, a restart of Umbraco can allow unauthorized users to gain admin-level permissions, potentially leading to...
Fedora 38 : mingw-nsis (2023-dfb6cc599f)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dfb6cc599f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Code injection
A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages...
CVE-2023-37198
Schneider Electric StruxureWare Data Center Expert (DCE) contains a CWE-94 code injection vulnerability that could allow remote code execution when an administrator uploads or tampers with installation packages. The issue affects StruxureWare Data Center Expert and related components (v7.9.3 and ...
CVE-2023-37198
A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages...
CVE-2023-35347
Microsoft Install Service Elevation of Privilege Vulnerability...
CVE-2023-35347
Microsoft Install Service Elevation of Privilege Vulnerability...