CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

Intel Easy Streaming Wizard Elevation of Privilege Vulnerability

Intel Easy Streaming Wizard is a set of streaming media delivery live configuration software from Intel USA. A privilege vulnerability exists in the installer in versions of Intel Easy Streaming Wizard prior to 2.1.0731, which stems from a failure to have the correct file permissions. A local...

Intel Remote Displays SDK Elevation of Privilege Vulnerability

Intel Remote Displays SDK is a teleprocessing software development kit SDK from Intel USA. The product enables low-latency capture, compression, decompression, and configuration of virtual displays. An elevation of privilege vulnerability exists in the installer in versions of Intel Remote Displa...

Intel Authenticate Elevation of Privilege Vulnerability

Intel Authenticate is a set of multi-factor authentication software from the U.S. company Intel Intel. An elevation of privilege vulnerability exists in the software installer in versions prior to Intel Authenticate 3.8. A local attacker could exploit this vulnerability to gain elevation of...

CVE-2019-13404

The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...

The vulnerability of the installation program for the OpenVINO toolset for Linux operating systems allows a hacker to disclose protected information.

The vulnerability of the installation program for the OpenVINO application development suite on Linux operating systems is related to security mechanism errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...

Intel Chipset Device Software Elevation of Privilege Vulnerability

Intel Chipset Device Software is a chipset firmware update utility from Intel Corporation USA. A security vulnerability exists in the installer in Intel Chipset Device Software INF Update Utility versions prior to 10.1.1.45. A local attacker can exploit the vulnerability to elevate privileges...

The vulnerability of the EnterpriseDB database management system’s installer allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EnterpriseDB database management system’s installer relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2019-5957

Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-10631

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests...

Apple iCloud for Windows iCloud Installer Code Execution Vulnerability

Apple iCloud for Windows is an American Apple Apple cloud service based on the Windows platform, which supports storage of music, photos, apps, contacts, etc. iCloud Installer is one of the iCloud installer components. A security vulnerability exists in the Windows Installer component in versions...

Intel Rapid Storage Technology enterprise Intel Accelerated Storage Manager elevation of privilege vulnerability

Intel Rapid Storage Technology enterprise RSTe is a rapid storage technology from Intel, U.S. Intel Accelerated Storage Manager is one of the accelerated storage managers. A security vulnerability exists in the installer for Intel Accelerated Storage Manager in Intel RSTe 5.5 and earlier versions...

Installer of Adobe Creative Cloud Desktop Application may insecurely load Dynamic Link Libraries

Overview Installer of Creative Cloud Desktop Application provided by Adobe contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Tomohisa Hasegawa of Canon Marketing Japan Inc. reported this vulnerability to IPA. JPCERT/CC coordinated wit...

CVE-2019-5912

Untrusted search path vulnerability in the installer of UNARJ32.DLL UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5913

Untrusted search path vulnerability in the installer of LHMelting LHMelting for Win32 Ver 1.65.3.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3.08 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Intel VTune Amplifier Elevation of Privilege Vulnerability

Intel VTune Amplifier is a set of performance analysis tools from Intel USA. The product is mainly used for performance analysis of software for high-performance computing, IoT embedded applications, device drivers and game engines. An elevation of privilege vulnerability exists in the installer ...

Intel Parallel Studio Elevation of Privilege Vulnerability

Intel Parallel Studio is a development kit for high-performance applications from Intel Corporation. An elevation of privilege vulnerability exists in the installer in versions prior to Intel Parallel Studio 2019 Gold, which can be exploited by a local attacker to elevate privileges...