Lucene search
+L

25 matches found

Mageia
Mageia
added 2017/08/16 12:01 a.m.22 views

Updated mingw-nsis packages fix security vulnerability

The Nullsoft Scriptable Install System version 2.50 contains a DLL hijacking attack which allows administrative root level access on the target Windows system...

4.1AI score
SaveExploits0References2
OSV
OSV
added 2017/08/16 12:01 a.m.8 views

MGASA-2017-0271 Updated mingw-nsis packages fix security vulnerability

The Nullsoft Scriptable Install System version 2.50 contains a DLL hijacking attack which allows administrative root level access on the target Windows system...

7.1AI score
SaveExploits0References3
Fedora
Fedora
added 2016/12/07 1:23 a.m.17 views

[SECURITY] Fedora 23 Update: mingw-nsis-2.50-1.fc23

NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...

2.8AI score
SaveExploits0
Cvelist
Cvelist
added 2015/03/22 1:00 a.m.25 views

CVE-2015-0941

The Inetc plugin for Nullsoft Scriptable Install System NSIS, as used in CERT/CC Failure Observation Engine FOE and other products, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and possibly execute arbitrary code by sending a craft...

7.3AI score0.01392EPSS
SaveExploits0References1
CVE
CVE
added 2015/03/22 1:00 a.m.45 views

CVE-2015-0941

CVE-2015-0941 : The Inetc plug‑in for NSIS does not validate SSL certificates, enabling MITM attacks that could spoof servers and potentially execute arbitrary code during download of Windows executables. Affected: NSIS Inetc plug‑in (used in FOE and other products). Impact: possible arbitrary co...

4.3CVSS7.5AI score0.01392EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder