Improper access control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27505

Intel’s advisory CVE-2023-27505 applies to Intel® Advanced Link Analyzer Standard Edition installers prior to version 22.1.1, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The vulnerability affects the installer component and is rated...

CVE-2023-22841

Unquoted search path in the software installer for the System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-20293 · Intel · Intel Unite Hub

Name of the Vulnerable Software and Affected Versions: IntelR UniteR Hub software installer for Windows versions prior to 4.2.34962 Description: The issue is related to improper access control in the IntelR UniteR Hub software installer for Windows, which may allow an authenticated user to...

The vulnerability of the platform installer for SAP BusinessObjects Business Intelligence allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to influence the confidentiality, integrity, and accessibility of the protected information by...

PT-2023-12989 · Intel · Intel Csme Software Installer

Name of the Vulnerable Software and Affected Versions: IntelR CSME software installer versions prior to 2239.3.7.0 Description: The issue is related to improper access control in the IntelR CSME software installer, which may allow an authenticated user to potentially enable escalation of privileg...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

Design/Logic Flaw

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

CVE-2023-36540 affects Zoom Desktop Client for Windows prior to 5.14.5. The vulnerability arises from an untrusted search path in the installer, which may allow an authenticated local user to escalate privileges. Affected product/version: Zoom Desktop Client for Windows

CVE-2023-37490

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the...

CVE-2023-37490

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the...

Design/Logic Flaw

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the...

CVE-2023-37490

The CVE-2023-37490 entry concerns SAP Business Objects Installer (versions 420, 430). A network-authenticated attacker can overwrite an executable file created in a temporary directory during installation and replace it with a malicious file, enabling a full compromise of confidentiality, integri...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...

Intel® Advanced Link Analyzer Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00848.html...

Siemens Parasolid Installer

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...

SAP Business Objects Code Issue Vulnerability

SAP Business Objects is a business intelligence suite from SAP, Germany. A code issue vulnerability exists in SAP BusinessObjects Installer that originates from allowing an authenticated attacker within a network to overwrite an executable file created in a temporary directory during installation...

Intel® ISPC Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Implicit SPMD Program Compiler ISPC software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-27509 Description: Improper...

Code injection

Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the repair function. The problem occurs as the repair function of the MSI is spawning an SYSTEM...