7554 matches found
SUSE CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
SUSE CVE-2020-18671
Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...
SUSE CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
SUSE CVE-2021-37995
Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...
SUSE CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...
SUSE CVE-2022-0799
Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...
SUSE CVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
SUSE CVE-2022-26488
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...
SUSE CVE-2022-39047
Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL...
Microsoft .NET Framework DoS And RCE Vulnerabilities (KB5022729)
This host is missing an important security update according to Microsoft KB5022729 Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Security Bulletin: A vulnerability (CVE-2021-35603) in Java SE affects IBM CICS TX Standard
Summary Java SE is used by IBM CICS TX Standard to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The fix removes vulnerability CVE-2021-35603 that allows an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact...
Security Bulletin: Multiple vulnerabilities in Java SE affect IBM CICS TX Advanced
Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The following CVEs are applicable: Denial of service CVEs - CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21294,...
CVE-2023-21800
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-21800
Windows Installer Elevation of Privilege Vulnerability...
Privilege escalation
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-21800 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2023-21800
CVE-2023-21800 is a Windows Installer Elevation of Privilege vulnerability. Affected component: Windows Installer. Root cause: elevation of privilege in local context (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8, HIGH). Exploitation status not shown in provided docs. Impact conc...
CVE-2023-21800 Windows Installer Elevation of Privilege Vulnerability
...
