601 matches found
PT-2024-5022 · Qlik · Qlikview
Name of the Vulnerable Software and Affected Versions: Qlik Qlikview versions prior to May 2022 SR3 12.70.20300 and prior to May 2023 SR2 12.80.20200 Description: A race condition in the installer executable may allow an existing lower privileged user to cause code to be executed in the context o...
The vulnerability of Windows operating system installers allows a hacker to increase their privileges.
The vulnerability of Windows operating system installers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Improper access control
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
CVE-2024-0833
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...
The vulnerability of the installer of the Intel NUC Pro Software Suite, related to an uncontrolled search path element, allows a hacker to trigger a service failure.
The vulnerability of the installer of the Intel NUC Pro Software Suite related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
CVE-2023-48670
Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...
CVE-2023-48670
Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...
PT-2023-30890 · Dell · Dell Supportassist
Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.14.1 and prior Description: A privilege escalation vulnerability exists in the installer of Dell SupportAssist for Home PCs, allowing a local low-privileged authenticated attacker to potentially...
Dell SupportAssist for Home PCs Code Issue Vulnerability
Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.14.1 and prior versions, which...
The vulnerability of the PHP agent installation script for Cisco AppDynamics allows attackers to enhance their privileges.
The vulnerability of the PHP agent installation for Cisco AppDynamics PHP Agent is related to the incorrect assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2023-25075
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-25075
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
Code injection
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
Vulnerability of the Installer component: The general installer for MySQL allows a perpetrator to gain access to read, modify, or delete data, and trigger a service failure.
Vulnerability of the Installer component: The general installer for MySQL is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to read, modify, or delete data, leading to service failure...
Oracle MySQL Security Vulnerabilities
Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL's MySQL Installer version 1.6.8, which originated from a vulnerability that allowed a low-privileged attacker to log in to the infrastructure...
The vulnerability of the Installer component in the Google Chrome browser allows a hacker to bypass existing security restrictions.
The vulnerability of the Google Chrome browser’s Installer component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...
SUSE CVE-2023-5477
Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access control via a crafted command. Chromium security severity: Low...
PT-2023-29021 · Unknown · October Cms
Name of the Vulnerable Software and Affected Versions: October CMS version 3.4.16 Description: A Cross-Site Scripting XSS vulnerability in the installer of October CMS allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field. Recommendations: For...
SAP BusinessObjects Suite Installer Security Vulnerability
SAP BusinessObjects Suite Installer is an application from SAP, Germany. A security vulnerability exists in SAP BusinessObjects Suite Installer versions 420 and 430 that originates from allowing an attacker to delete all operating system files...