PT-2023-11343 · Hewlett Packard · Hp Softpaq Installer

Name of the Vulnerable Software and Affected Versions: HP Softpaq installer affected versions not specified Description: A potential security issue has been identified that can lead to arbitrary code execution. Recommendations: At the moment, there is no information about a newer version that...

Veeam Agent for Microsoft Windows Update Fails with "The digital signature of the downloaded update file is invalid"

Challenge The integrated Veeam Agent for Microsoft Windows Update check displays the error: The digital signature of the downloaded update file is invalid. Most likely, it got corrupted. Please, download the update again. An alternate message is a warning stating: Version is available but cannot ...

June 6, 2023, update for Visio 2013 (KB5002343)

June 6, 2023, update for Visio 2013 KB5002343 This article describes update 5002343 for Microsoft Visio 2013 that was released on June 6, 2023.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't apply to the...

Chromium: CVE-2023-2939 Insufficient data validation in Installer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

The vulnerability of the software for configuring Schneider Electric Easergy Builder allows a hacker to execute arbitrary code.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to an uncontrolled element in the search process of the installer. Exploiting this vulnerability could allow a perpetrator to perform arbitrary actions during the installation process...

Google Chrome Installer Component Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Installer component, which can be exploited by attackers to bypass security restrictions...

DEBIAN-CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

Google Chrome < 114.0.5735.90 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 114.0.5735.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop30 advisory. - Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remot...

PT-2023-3522 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to insufficient data validation in the installer of Google Chrome on Windows, allowing a local attacker to perform privilege escalation via a crafted symbolic lin...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 16 security fixes: 1410191 High CVE-2023-2929: Out of bounds write in Swiftshader. Reported by Jaehun Jeong@n3sk of Theori on 2023-01-25 1443401 High CVE-2023-2930: Use after free in Extensions. Reported by asnine on 2023-05-08 1444238 High...

[SECURITY] Fedora 37 Update: bottles-51.6-1.fc37

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

Docker Desktop 参数注入漏洞

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

CVE-2023-27529

Wacom Tablet Driver installer prior to 6.4.2-1 for macOS contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege...

CVE-2023-27529

Wacom Tablet Driver installer prior to 6.4.2-1 for macOS contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege...

JVN#90278893: Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access

Wacom Tablet Driver installer for macOS provided by Wacom contains an improper link resolution before file access vulnerability CWE-59. Impact When a user is tricked to execute a small malicious script before executing the affected version of the installer, an arbitrary code may be executed with...