Design/Logic Flaw

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

CVE-2020-9472

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

CVE-2020-9472

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

CVE-2020-9472

CVE-2020-9472 affects Umbraco CMS 8.5.3. The authenticated user can upload files via the Install Package functionality, which can lead to Remote Code Execution. The vulnerability is evidenced by the CVE description and corroborated across multiple sources in the connected documents (e.g., GHSA/OS...

CVE-2020-9472

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

CVE-2020-9472: Unrestricted Upload of File with Dangerous Type

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

PT-2020-9583

Name of the Vulnerable Software and Affected Versions: Trend Micro products affected versions not specified Description: The issue is related to a DLL hijack vulnerability in the install package used by several Trend Micro products. This vulnerability can be exploited during the initial...

Google Android elevation of privilege vulnerability (CNVD-2019-01567)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An arbitrary memory release vulnerability exists in the reallyinstallpackage of install.cpp in Google Android 7.0, 7.1.1, and 7.1.2. A local attacker can exploit this...

CVE-2018-9557

In reallyinstallpackage of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0...

PT-2018-19048

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.2 Description The issue is related to the really install package function in install.cpp, where uninitialized data can lead to the freeing of arbitrary memory. This could result in local escalation of privilege...

IBM AIX JRE/SDK installp and updatep package denial of service vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. JRE/SDK installp and updatep packages are among the packages.JRE/SDK install packages are a JRE/SDK installation package; updatep packages are JRE/SDK update packages. JRE/SDK installp packages is a...

Fedora Update for borgbackup FEDORA-2016-20014bf2bd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...

CVE-2015-8113: Undefined Security Weakness

Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...

Fedora Update for pcre FEDORA-2015-14242

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package...

Fedora Update for firefox FEDORA-2015-8806

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for kernel RHSA-2014:0285-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dcraw FEDORA-2013-22929

Check for the Version of dcraw OpenVAS Vulnerability Test Fedora Update for dcraw FEDORA-2013-22929 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for kmouth FEDORA-2013-13499

Check for the Version of kmouth OpenVAS Vulnerability Test Fedora Update for kmouth FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...