CVE-2020-5867

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

Design/Logic Flaw

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

CVE-2020-5867

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

Google Earth Pro Remote Code Execution Vulnerability

Google Earth Pro is a 3D interactive globe from Google USA, which presents a 3D representation of the Earth based primarily on satellite imagery. A security vulnerability exists in the Windows installer of Google Earth Pro versions prior to 7.3.3. A remote attacker can exploit the vulnerability t...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

Design/Logic Flaw

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

CVE-2020-8895 DLL Hijacking in Google Earth Pro Windows installer

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

Description of the Office 2013 update: March 12, 2013

Description of the Office 2013 update: March 12, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains stability and performance improvements. Issu...

Description of the Office 2013 update: September 10, 2013

Description of the Office 2013 update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains...

Malicious Package

Overview atlassian-plugininstaller is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Intel Data Migration Software Elevation of Privilege Vulnerability

Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...

Intel Binary Configuration Tool Code Issue Vulnerability

Intel Binary Configuration Tool is an Intel utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in the installer in the Intel Binary Configuration Tool for Windows-based platforms. The vulnerability can be...

Microsoft Visual Studio Extension Installer Service Elevation of Privilege Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio Extension Installer Servic...

CVE-2020-0598

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0547

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0598

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0547

CVE-2020-0547 affects Intel® Data Migration Software versions 3.3 and earlier. The root cause is incorrect default permissions in the installer, enabling an authenticated user to potentially elevate privileges via local access. Public details from Intel’s advisory (Intel® Data Migration Software ...