JetBrains ReSharper DLL Hijacking Vulnerability

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. NET development. The program is mainly used for code quality analysis, code error alerts, etc. installers is the installation program for JetBrains ReSharper. This program is mainly used for co...

McDonalds-Themed Facebook Ads Serve Up Banking Trojans

The Mispadu banking trojan is using a McDonalds malvertising tactic to ultimately steal payment-card data and online banking information. Written in Delphi, Mispadu targets Brazil and Mexico, uses pop-up windows and contains backdoor functionality. According to researchers at ESET, Mispadu spread...

December 4, 2018, update for Office 2010 (KB4461579)

December 4, 2018, update for Office 2010 KB4461579 This article describes update 4461579 for Microsoft Office 2010 that was released on December 4, 2018. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't appl...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14602

CVE-2019-14602 affects the Nuvoton CIR Driver for Windows used on Intel NUC, version 1.02.1002 and earlier. The root cause is improper permissions in the installer that may allow an authenticated local user to escalate privileges. The CVSS v3.1 score is 7.8 (LOCAL, Privileges Required: LOW, User ...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-15416

The Sony keyakikddi Android device with a build fingerprint of Sony/keyakikddi/keyakikddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys contains a pre-installed app with a package name of com.kddi.android.packageinstaller app versionCode=70008, versionName=08.10.03 that allows other...

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525236)

This host is missing a critical security update according to Microsoft KB4525236 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525235)

This host is missing a critical security update according to Microsoft KB4525235 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525232)

This host is missing a critical security update according to Microsoft KB4525232 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1418

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

CVE-2019-1418

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2019-1382

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'...

CVE-2019-1382

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'...