Design/Logic Flaw

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

CVE-2023-20274

CVE-2023-20274 affects Cisco AppDynamics PHP Agent. The issue arises from insufficient permissions set by the PHP Agent Installer on the install directory, enabling a locally authenticated attacker to modify installer-owned objects and execute with PHP privileges, potentially elevating to root on...

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

CVE-2023-20274: Improper Privilege Management

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

SanDisk SecureAccess Installer Code Execution

The vulnerability of the software installer for SanDisk SecureAccess drives relates to an uncontrolled search path element. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Security Bulletin: InfoSphere Information Server is vulnerable due to improper access control (CVE-2023-40363)

Summary An improper access control vulnerablity in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-40363 DESCRIPTION: InfoSphere Information Server could allow an authenticated user to change installation files due to incorrect file permission settings. CVSS Base...

CVE-2023-22818

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code...

CVE-2023-22818

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code...

Code injection

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code...

CVE-2023-22818 Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code...

CVE-2023-22818

CVE-2023-22818 affects the SanDisk Security Installer for Windows. The issue is a DLL search order hijack that allows a local attacker to cause the installer to load a malicious DLL from the attacker’s folder, enabling arbitrary code execution with the privileges of the vulnerable installer and p...

Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

PT-2023-7109 · Cisco · Cisco Appdynamics Php Agent

Name of the Vulnerable Software and Affected Versions: Cisco AppDynamics PHP Agent affected versions not specified Description: The issue is related to incorrect permission assignment in the installer script of the Cisco AppDynamics PHP Agent. This could allow an authenticated, local attacker to...

SanDisk Security Installer Security Vulnerability

Western Digital SanDisk Security Installer is a security installer from Western Digital. A security vulnerability exists in SanDisk Security Installer that stems from the presence of multiple DLL search order hijacking vulnerabilities that could allow an attacker with local access rights to execu...

CVE-2023-22818: Uncontrolled Search Path Element

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code...

PT-2023-6921

Name of the Vulnerable Software and Affected Versions SanDisk Security Installer for Windows affected versions not specified Description The issue concerns a DLL Search Order Hijack that could allow attackers with local access to execute arbitrary code by executing the installer in the same folde...

CVE-2023-34997

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34997

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33874

Uncontrolled search path in some IntelR NUC 12 Pro Kits & Mini PCs - NUC12WS IntelR HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...