Wacom Tablet Driver 后置链接漏洞

Wacom Tablet Driver installer is an installation driver from Wacom Japan Wacom. A security vulnerability exists in Wacom Tablet Driver versions prior to 6.4.2-1, which stems from a contained file access vulnerability that could be exploited by an attacker to execute arbitrary code with root...

PT-2023-21195 · Wacom · Wacom Tablet Driver

Name of the Vulnerable Software and Affected Versions: Wacom Tablet Driver installer versions prior to 6.4.2-1 Description: The issue allows for arbitrary code execution with root privilege when a user is tricked into executing a malicious script before running the affected installer version. Thi...

CVE-2023-27529

CVE-2023-27529 affects the Wacom Tablet Driver for macOS prior to 6.4.2-1, where an improper link resolution before file access can allow arbitrary code execution with root privileges if a user runs a crafted script before the installer. Public sources (Red Hat, JVN, PT-Security, NVD, JVN DB) con...

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

Fedora: Security Advisory for rust-coreos-installer (FEDORA-2023-37ae269843)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: rust-coreos-installer-0.17.0-2.fc37

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

DEBIAN-CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

Design/Logic Flaw

DISPUTED An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and...

CVE-2023-29820

CVE-2023-29820 affects Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and earlier. According to Red Hat entries, a local attacker can access sensitive information via the EXE installer, with the vulnerability stemming from (unstated) local-privilege context and exposure during ins...

Webroot Secure Anywhere 安全漏洞

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot Secure Anywhere Endpoint Protection CE 23.1 v.9.0.33.39 and prior versions, which originated from a vulnerability that allows local attackers to access sensitive information v...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33963

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33963

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22440

The CVE-2023-22440 issue affects Intel® SCS Add-on software installer for Microsoft SCCM (all versions). The root cause is incorrect default permissions, which could allow an authenticated user to escalate privileges via local access. The Intel advisory notes no updates will be released and recom...

CVE-2022-33963

Summary : CVE-2022-33963 affects Intel® Unite® Client software for Windows prior to version 4.2.34870. The root cause is incorrect default permissions in the software installer, which may allow an authenticated user to escalate privileges via local access. Affected components/versions : Intel® Un...