CVE-2019-17560

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...

CVE-2019-17560

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...

CVE-2019-17560

CVE-2019-17560 describes an issue in the Apache NetBeans autoupdate system where HTTPS downloads are not validating SSL certificates or hostnames. This enables an attacker to intercept autoupdates and modify them, potentially injecting malicious code. The vulnerability affects NetBeans releases u...

PT-2020-4106 · Apache · Apache Netbeans

Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions up to and including 11.2 Description: The issue is related to the Apache NetBeans autoupdate system, which does not validate SSL certificates and hostnames for https-based downloads. This allows an attacker to interce...

Unable to Autoupdate Workspace App for Mac 19.10/19.10.1 - Error: "An unexpected error occurred during installation"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to autoupdate Workspace App for Mac from 19.10/19.10.1 to 19.10.2 and above you will...

openSUSE Security Update : opera (openSUSE-2019-2154)

This update for opera fixes the following issues : Opera was updated to version 63.0.3368.88 : - DNA-79103 Saving link to bookmarks saves it to Other bookmarks folder - DNA-79455 Crash at views::MenuController:: FindNextSelectableMenuItemviews::MenuItemView, int, views::...

Code injection

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges...

Cordaware bestinformed Windows client arbitrary command execution and elevation of privilege vulnerability

Cordaware bestinformed is a mass notification system from the German company Cordaware. A security vulnerability exists in the Scripting and AutoUpdate features in the Cordaware bestinformed Microsoft Windows client prior to version 6.2.1.0. A remote attacker could exploit the vulnerability to...

CVE-2019-6265

The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...

CVE-2019-6265

The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...

Command injection

The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...

CVE-2019-6265

The CVE-2019-6265 vulnerability affects Cordaware bestinformed the Windows client prior to version 6.2.1.0, in the Scripting and AutoUpdate functionality. The root cause is described as insecure implementations within these features, enabling a remote attacker to execute arbitrary commands and es...

CVE-2019-6265

The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...

CVE-2018-8412

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...

Privilege escalation

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...

CVE-2018-8412

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...

CVE-2018-8412

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...

CVE-2018-8412

CVE-2018-8412 concerns Microsoft Office for Mac and the Microsoft AutoUpdate (MAU) component. The vulnerability arises because MAU improperly validates updates before installing them, enabling an attacker who can run code on the target to elevate privileges by placing a crafted executable in a sp...

Microsoft (MAU) Office Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them. An attacker who successfully exploited the vulnerability who already has the ability to execute code on a system could elevate privileges. To...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2014-0838, CVE-2014-0835, CVE-2014-0836, CVE-2014-0837)

Summary Multiple vulnerabilities exist in the AutoUpdate settings page and the AutoUpdate process within the IBM QRadar SIEM that when used together could result in remote code execution. Vulnerability Details VULNERABILITY DETAILS: CVE ID: CVE-2014-0838 DESCRIPTION: A flaw in the IBM QRadar...