Google Chrome Extensions UI Design Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the implementation of the Web Store inline-installer in the Extensions UI of Google Chrome prior to version 49.0.2623.75, which stems from the program's failure to limit the...

ICZ MATCHA INVOICE Code Injection Vulnerability

ICZ MATCHA INVOICE is a Web-based billing management software from ICZ Japan. A security vulnerability exists in the installer of ICZ MATCHA INVOICE 2.5.6 and earlier versions, which can be exploited by remote attackers to execute arbitrary PHP code...

ICZ MATCHA SNS Code Injection Vulnerability

ICZ MATCHA SNS is a set of SNS software from ICZ Japan. A security vulnerability exists in the installer of ICZ MATCHA SNS 1.3.6 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary PHP code...

IBM InfoSphere Information Server Installer Local Information Disclosure Vulnerability

IBM InfoSphere Information Server is a data integration software platform that helps organizations get more value out of complex, heterogeneous information scattered across systems. A security vulnerability in the IBM InfoSphere Information Server installer during installation allows local users ...

The vulnerability of the OnCommand Workflow Automation data storage automation tool allows a hacker to execute arbitrary code.

The OnCommand Workflow Automation tool installer installs the JDWP service Java Debugging Wire Protocol. This service allows a remote attacker to execute arbitrary code through an unspecified vector...

CVE-2014-9141

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...

Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)

This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnjun12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Air Multiple Vulnerabilities June-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c 2013 Greenbo...

CVE-2013-0261

A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the /tmp directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption...

CVE-2012-4206

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory...

CVE-2012-4897

Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory...

VMSA-2012-0014:VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates

VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0014 VMware Security Advisory Synopsis: VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates VMware Security...

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Ubuntu 6.06 LTS : Installer vulnerability (USN-316-1)

Iwan Pieterse discovered that, if you select 'Go Back' at the final message displayed by the alternate or server CD installer 'Installation complete' and then continue with the installation from the installer's main menu, the root password is left blank rather than locked. This was due to an erro...

CVE-2007-1279

Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...

USN-316-1: installer vulnerability

Iwan Pieterse discovered that, if you select "Go Back" at the final message displayed by the alternate or server CD installer "Installation complete" and then continue with the installation from the installer's main menu, the root password is left blank rather than locked. This was due to an erro...

CVE-2006-2221

A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.11 and earlier, generates an installer that allows local users to cause a denial of service via a symlink attack on the bitrockinstaller.log temporary file. NOTE: it is...

Ubuntu 5.10 : Ubuntu 5.10 installer vulnerability (USN-262-1)

Karl Oie discovered that the Ubuntu 5.10 installer failed to clean passwords in the installer log files. Since these files were world-readable, any local user could see the password of the first user account, which has full sudo privileges by default. The updated packages remove the passwords and...

remedy.txt

Security Holes in Remedy Client Installer Summary ------- Due to improper handling of temporary files, the installer program for Remedy Software's Action Request System client for unix can allow local users to gain root privileges. Details ------- The installer script for the unix AR clients...

CVE-2024-31954

An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. An attacker must already have us...