CVE-2018-18093

Intel VTune Amplifier 2018 for Windows (Update 3 and earlier) contains an elevation of privilege vulnerability due to improper installer file permissions, allowing a local unprivileged user to potentially gain privileged access. Intel’s advisory INTEL-SA-00194 confirms the issue and advises updat...

CVE-2018-3705

CVE-2018-3705 affects Intel® System Defense Utility (all versions). The vulnerability arises from improper directory permissions in the installer, which could allow an authenticated local attacker to cause a denial of service. Intel’s advisory INTEL-SA-00209 states there are no mitigations/update...

CVE-2018-3704

CVE-2018-3704: Intel Parallel Studio XE for Windows* has an elevation of privilege via the installer due to improper directory permissions. The issue affects Intel Parallel Studio XE for Windows* before 2019 Gold, enabling an authenticated local attacker to potentially escalate privileges. Intel’...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Flash Player installer. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Adobe Security Bulletin APSB18-...

CVE-2018-7112

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...

Design/Logic Flaw

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...

CVE-2018-7112

The CVE-2018-7112 flaw affects HPE ProLiant servers (Gen9/Gen8, G7, G6) via the Windows firmware installer and related system ROM/iLO components. Root cause: local disclosure of privileged information due to the HPE Windows firmware installer. Remediation: updated firmware installers released in ...

CVE-2018-7112

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...

[SECURITY] [DLA 1602-1] nsis security update

Package : nsis Version : 2.46-10+deb8u1 CVE ID : CVE-2015-9267 CVE-2015-9268 Among others, Andre Heinicke from gpg4win.org found several issues of nsis, a tool for creating quick and user friendly installers for Microsoft Windows operating systems. The issues are fixed by ... ... using...

Rakuten Securities MARKETSPEED Security Load Dynamic Link Library Vulnerability

Rakuten Securities MARKETSPEED is a foreign exchange-specific trading tool from Japan's Rakuten Securities Rakuten Securities. A security vulnerability exists in the installer in Rakuten Securities MARKETSPEED version 16.4 and earlier. An attacker could exploit the vulnerability to execute...

Intel RST Installer Vulnerability - Lenovo Support US

No description provided...

The installer of MARKET SPEED may insecurely load Dynamic Link Libraries

Overview The installer of MARKET SPEED provided by Rakuten Securities, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Takashi Sugawara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#78422300: The installer of MARKET SPEED may insecurely load Dynamic Link Libraries

The installer of MARKET SPEED provided by Rakuten Securities, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3697

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...

Input validation

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...

Input validation

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

Input validation

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3697

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...