CVE-2023-43629

Incorrect default permissions in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-3640 Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executabl...

PT-2024-13042 · Unknown · Endurance Gaming Mode

Name of the Vulnerable Software and Affected Versions: Endurance Gaming Mode software versions prior to 1.3.937.0 Description: The issue is related to incorrect default permissions in some software installers, which may allow an authenticated user to potentially enable escalation of privilege via...

CVE-2023-43748: Improper Access Control

Improper access control in some IntelR GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42433: Incorrect Default Permissions

Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-3640: Unquoted Search Path or Element

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executabl...

PT-2024-13129 · Intel · Intel Gpa

Name of the Vulnerable Software and Affected Versions: IntelR GPA software versions prior to 2023.3 Description: The issue is related to incorrect default permissions in some IntelR GPA software installers, which may allow an authenticated user to potentially enable escalation of privilege via...

CVE-2024-27244

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27244

Summary (CVE-2024-27244) Zoom Workplace VDI App for Windows contains an issue where the installer performs insufficient validation of data authenticity, enabling an authenticated user to escalate privileges via local access. Documented impact is elevation of privilege with local access; no exploi...

CVE-2024-3182

Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service EMS password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files...

CVE-2024-3182

CVE-2024-3182 affects TIBCO Hawk versions 6.2.0–6.2.3, where the Universal Installer (including the Silent Installer) can disclose the EMS password outside hawkagent.cfg and hawkevent.cfg. Root cause: install-time password exposure due to the installer process. Impact per advisory: potential acce...

PT-2024-5136 · Zoom · Zoom Workplace App For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI App for Windows affected versions not specified Description: The issue is related to insufficient verification of data authenticity in the installer, which may allow an authenticated user to conduct an escalation of privile...

CVE-2024-3182: Exposure of Sensitive Information to an Unauthorized Actor

Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service EMS password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files...

Intel DTT Software Installer Advisory - Lenovo Support US

No description provided...

CVE-2024-31954: Insertion of Sensitive Information into Externally-Accessible File or Directory

An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. An attacker must already have us...

RHEL 8 : coreos-installer (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - coreos-installer: restrict access permissions on /boot/ignition,/config.ign CVE-2021-3917 Note that Nessus has not...

PT-2024-24315 · Samsung · Samsung Portable Ssd For T5

Name of the Vulnerable Software and Affected Versions: Samsung Portable SSD for T5 version 1.6.10 Description: An issue was discovered in the installer of Samsung Portable SSD for T5 on Windows, allowing an attacker to tamper with the directory and DLL files used during the installation process...

PVS 2402 | Console Setup: EdgeWebView2 not installing correctly

When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...

May 7, 2024, update for Outlook 2016 (KB5002593)

None None...

CVE-2023-51579

Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on...