BIT-MYBB-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

electron-builder security vulnerability

electron-builder is a tool for packaging and building ready-to-distribute Electron, Proton Native applications for macOS, Windows, and Linux with out-of-the-box "auto-update" support. A security vulnerability exists in electron-builder prior to version 24.13.2, which stems from the fact that if a...

March 5, 2024, update for Excel 2016 (KB5002569)

None None...

electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

Impact Windows-Only: The NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh installer script. NSExec by default searches the current directory of where the installer is located before searching PATH. This means that if an attacker can place a malicious executable file named...

GHSA-R4PF-3V7R-HH55 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

Impact Windows-Only: The NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh installer script. NSExec by default searches the current directory of where the installer is located before searching PATH. This means that if an attacker can place a malicious executable file named...

PT-2024-21807

Name of the Vulnerable Software and Affected Versions electron-builder versions prior to 24.13.2 Description A vulnerability in electron-builder for Windows allows an attacker to execute a malicious file named cmd.exe if it is placed in the same folder as the installer. The NSIS installer makes a...

Backups to DDBoost Repository Fail After Upgrading to VBR 12.1.1

Issue Resolved in Veeam Backup & Replication 12.2 This issue was resolved in Veeam Backup & Replication v12.2. Customers impacted by this issue should upgrade to the latest version of Veeam Backup & Replication. Article Applicability The primary error from failing to load the DD Boost library Err...

Intel® NUC Software Advisory

Summary: Potential security vulnerabilities in some Intel® NUC software installers may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32272 Description: Uncontrolled search...

CVE-2024-0197

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

Design/Logic Flaw

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197 Privilege Escalation in Thales SafeNet Sentinel HASP LDK

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197 Privilege Escalation in Thales SafeNet Sentinel HASP LDK

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197

CVE-2024-0197 affects the Windows installer of Thales SafeNet Sentinel HASP LDK, prior to version 9.16. The root cause is an installer flaw that enables local privilege escalation when an attacker already has local access. The impact is privilege elevation to SYSTEM with high confidentiality/inte...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

Authentication flaw

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993

CVE-2023-5993 affects Thales SafeNet Authentication Client on Windows due to a Windows Installer flaw prior to version 10.8 R10 that enables local privilege escalation. The root cause is a vulnerability in the installer process, allowing an attacker with local access to escalate privileges (CVE d...