281 matches found
CVE-2019-17561
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability...
CVE-2019-17560
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...
CVE-2019-17560
CVE-2019-17560 describes an issue in the Apache NetBeans autoupdate system where HTTPS downloads are not validating SSL certificates or hostnames. This enables an attacker to intercept autoupdates and modify them, potentially injecting malicious code. The vulnerability affects NetBeans releases u...
CVE-2019-17560
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...
CVE-2019-17560: Improper Certificate Validation
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...
PT-2020-4106 · Apache · Apache Netbeans
Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions up to and including 11.2 Description: The issue is related to the Apache NetBeans autoupdate system, which does not validate SSL certificates and hostnames for https-based downloads. This allows an attacker to interce...
CVE-2019-17561: Improper Verification of Cryptographic Signature
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability...
Unable to Autoupdate Workspace App for Mac 19.10/19.10.1 - Error: "An unexpected error occurred during installation"
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When trying to autoupdate Workspace App for Mac from 19.10/19.10.1 to 19.10.2 and above you will...
openSUSE Security Update : opera (openSUSE-2019-2154)
This update for opera fixes the following issues : Opera was updated to version 63.0.3368.88 : - DNA-79103 Saving link to bookmarks saves it to Other bookmarks folder - DNA-79455 Crash at views::MenuController:: FindNextSelectableMenuItemviews::MenuItemView, int, views::...
Code injection
Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges...
Cordaware bestinformed Windows client arbitrary command execution and elevation of privilege vulnerability
Cordaware bestinformed is a mass notification system from the German company Cordaware. A security vulnerability exists in the Scripting and AutoUpdate features in the Cordaware bestinformed Microsoft Windows client prior to version 6.2.1.0. A remote attacker could exploit the vulnerability to...
CVE-2019-6265
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...
CVE-2019-6265
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...
Command injection
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...
CVE-2019-6265
The CVE-2019-6265 vulnerability affects Cordaware bestinformed the Windows client prior to version 6.2.1.0, in the Scripting and AutoUpdate functionality. The root cause is described as insecure implementations within these features, enabling a remote attacker to execute arbitrary commands and es...
CVE-2019-6265
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...
CVE-2019-6265: Undefined Security Weakness
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges...
CVE-2018-8412
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...
Privilege escalation
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...
CVE-2018-8412
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...