Lucene search
+L

7577 matches found

OSV
OSV
added 2025/03/03 7:44 a.m.5 views

MAL-2025-2055 Malicious code in tg-shell-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183483dd192b9daec2a5d81eda2a6c1b448091a4cfe626150636d2f1be19fd7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2011-1144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1...

3.3CVSS5.5AI score0.00311EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:0 a.m.9 views

The vulnerability of the Installer component for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Installer component for Windows operating systems is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.4AI score0.00791EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/25 8:15 p.m.7 views

CVE-2024-45418

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access...

8.8CVSS5.8AI score0.00459EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/25 8:15 p.m.26 views

CVE-2024-45417

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

6CVSS0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/25 8:15 p.m.7 views

CVE-2024-45417

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/25 7:52 p.m.21 views

CVE-2024-45418 Zoom Apps for macOS - Symbolic Link Following

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access...

5.4CVSS0.00459EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/25 7:49 p.m.92 views

CVE-2024-45417

Zoom Apps for macOS is affected by CVE-2024-45417 due to uncontrolled resource consumption in the installer prior to version 6.1.5. A privileged local user could leverage this to disclose information. The available details indicate the impact is information disclosure with local access, and remed...

6CVSS6.4AI score0.00184EPSS
SaveExploits0References1Affected Software4
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.7 views

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.1.5, which stems from the installer symbolic link following, and could lead to elevation of privilege by an authenticated user via network access...

8.8CVSS6.8AI score0.00459EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.8 views

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.1.5, which stems from uncontrolled resource consumption by the installer and could lead to the disclosure of information via local access by privileged users...

6CVSS6AI score0.00184EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/02/24 12:0 a.m.14 views

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

7.8CVSS6.9AI score0.00791EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 9:33 p.m.20 views

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.2AI score0.0017EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 7:22 p.m.10 views

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS6.8AI score0.00791EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/13 7:13 p.m.12 views

CVE-2025-21206

Visual Studio Installer Elevation of Privilege Vulnerability...

7.3CVSS6.8AI score0.00682EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/02/13 4:16 p.m.10 views

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

6.2CVSS6.8AI score0.00364EPSS
SaveExploits0References5
Fedora
Fedora
added 2025/02/13 2:2 a.m.19 views

[SECURITY] Fedora 40 Update: rust-coreos-installer-0.23.0-2.fc40

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.21 views

The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

7.3CVSS7.7AI score0.00682EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2025/02/12 10:15 p.m.34 views

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00158EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/12 10:15 p.m.30 views

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.0017EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/12 10:15 p.m.9 views

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

6CVSS0.00166EPSS
SaveExploits0References1
Rows per page
Query Builder