CVE-2020-10237

Mode C: CVE-2020-10237 affects Froxlor up to 0.10.15. The installer writes configuration data, including passwords, to files in /tmp and only restores proper permissions after writing the sensitive data, enabling potential local disclosure if the file is read at the right time via _createUserdata...

Red Software PDFescape Desktop Code Issue Vulnerability

Red Software PDFescape Desktop is the United States Red Software's set of PDF document editing tools. The product supports PDF document editing, conversion and merging. A code issue vulnerability exists in the installer in Red Software PDFescape Desktop 4.0.22 and prior versions. The vulnerabilit...

Western Digital WesternDigitalSSDDashboardSetup.exe Code Issue Vulnerability

Western Digital WesternDigitalSSDDashboardSetup.exe is an installer for SSD performance monitoring dashboard software from Western Digital. A code issue vulnerability exists in Western Digital WesternDigitalSSDDashboardSetup.exe versions prior to 3.0.2.0. An attacker could exploit this...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Design/Logic Flaw

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

CVE-2020-9418 affects PDFescape Desktop (≤ 4.0.22). The installer is vulnerable to DLL hijacking due to an untrusted search path, enabling local privilege elevation and code execution. Affected component: installer binary; root cause: DLL search order/location handling. Exploitation is described ...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in handling symbolic links within MSI packages. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in handling symbolic links within MSI packages. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Modules Installer service in Windows operating systems allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data through a specially created application...

Trend Micro Vulnerability Protection DLL Sideloading Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection. A DLL side-loading vulnerability exists in Trend Micro Vulnerability Protection 2.0. The vulnerability can be exploited by an attacker via the produ...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. An uncontrolled search path vulnerability exists in the installer component of the Cisco AnyConnect Secure Mobility Client for Windows versions prior...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

PT-2020-1762 · Cisco · Cisco Anyconnect Secure Mobility Client

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.8.02042 Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy...