PT-2022-23357 · Scooter · Beyond Compare

Name of the Vulnerable Software and Affected Versions: Scooter Beyond Compare versions 4.2.0 through 4.4.2 Description: The issue is an elevation of privilege breakout vulnerability in the Windows EXE installer. It allows a logged-in user to run applications with elevated privileges via the...

Scooter Software Beyond Compare 安全漏洞

Scooter Software Beyond Compare is content comparison tool software from Scooter Software. A security vulnerability exists in Scooter Software Beyond Compare versions 4.2.0 through 4.4.2 prior to 4.4.3, which stems from an elevated privilege vulnerability in the Windows EXE installer that allows...

Vulnerabilities fixed in Oracle Database Server

Oracle has fixed vulnerabilities in the following products: Oracle Database Server Oracle Database - Enterprise Edition RDBMS Security. Oracle Spatial and Graph Oracle Universal Installer Oracle Application Express Oracle SQLcl The vulnerabilities potentially enable a malicious party to perform...

CVE-2016-15003

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

Code injection

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

CVE-2016-15003 FileZilla Client Installer uninstall.exe unquoted search path

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

CVE-2016-15003

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Samsung USB Driver Windows Installer for Mobile Phones Input Validation Error Vulnerability

Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...

The vulnerability of the Git version control system installer allows a hacker to execute arbitrary code.

The vulnerability of the Git distributed version control system installer is related to the use of an unreliable search path. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

CVE-2021-45492

CVE-2021-45492 affects Sage 300 ERP (through 6.8.x). The installer places C:\Sage\Sage300\Runtime at the front of the system PATH, and this directory is writable by unprivileged users due to weak C:\ permissions inherited by the installer. Because PATH entries are used for DLL search order, an at...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10057-1 Rating: important References: Cross-References: CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2294 Affected Products: openSUSE Leap 15.3:NonFree openSUSE Leap 15.4:NonFree An update th...

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

Design/Logic Flaw

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

CVE-2022-31012

Git for Windows (a Windows-specific patch set of Git) contains a vulnerability tracked as CVE-2022-31012 where the installer can mistakenly execute a binary placed at C:\mingw64\bin\git.exe during a fresh install (not during upgrades). A fix was released in version 2.37.1. Workarounds include cre...