CVE-2022-41796

Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Verint Desktop Resources 安全漏洞

Verint Desktop Resources is a software from Verint. A security vulnerability exists in Verint Desktop Resources version 15.2, which originated when the MSI installer allowed an unprivileged local user to elevate their privileges during installation or repair...

CVE-2020-12744

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

PT-2022-5833 · Unknown · Content Transfer

Name of the Vulnerable Software and Affected Versions: Content Transfer for Windows versions 1.3 and prior Description: The issue is related to an untrusted search path vulnerability in the installer. This could allow an attacker to elevate privileges by using a specially crafted DLL. The...

The vulnerability of the implementation of executable files of the IntelliJ IDEA software installer allows a perpetrator to execute arbitrary code.

The vulnerability of the executable file installation mechanism of the IntelliJ IDEA integrated development environment is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to execute arbitrary code...

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

Design/Logic Flaw

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of the Device Software Manager installer, related to an uncontrolled search path, allows a hacker to load arbitrary files.

The vulnerability of the Device Software Manager installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to load arbitrary files...

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

CVE-2022-2313

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed...

The vulnerability of the Git version control system installer allows a hacker to execute arbitrary code.

The vulnerability of the Git distributed version control system installer is related to the use of an unreliable search path. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

CVE-2022-31012 Git for Windows' installer can be tricked into executing an untrusted binary

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

Git for Windows 代码问题漏洞

Git for Windows is the Git groups' Git for Windows. A code issue vulnerability exists in versions prior to Git for Windows v2.37.1, which stems from the possibility that the installer can be tricked into executing untrusted binaries...

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

InnoSetup 代码问题漏洞

InnoSetup is a free installer for Windows programs provided by Jordan Russell and Martijn Laan of jrsoftware. A security vulnerability exists in InnoSetup that originates from an uncontrolled search path in the application's installer...

CVE-2022-31216

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...