9273 matches found
CVE-2017-3092: Uncontrolled Search Path Element
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution...
CVE-2017-3090: Uncontrolled Search Path Element
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution...
Clicking Outlook 2016 search field prompts for install and hangs
Every time the search field in Outlook 2016 is clicked on in an elastically layered image, a prompt for credentials is displayed and an installer launches & hangs. This completely disables the search functionality of Outlook. This error can also occur on Outlook 2013...
CVE-2017-3141
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2-9.2.9, 9.3.2-P1-9.3.6, 9.4.0-9.8.8, 9.9.0-9.9.10, 9.10.0-9.10.5, 9.11.0-9.11.1, 9.9.3-S1-9.9.10-S1,...
Open Source Full Featured Network Operating System: OpenSwitch
Open Source Full Featured Network Operating System OpenSwitch provides a fully-featured L2/L3 control plane stack, traditional and programmatic, declarative control plane. The 24×7 nature of global digital economy and the explosion of data have changed how we think about data center networking...
MSRT June 2017: Removing sneaky Xiazai
In the June release of the Microsoft Malicious Software Removal Tool MSRT, we’re adding Xiazai, a widespread family of browser modifiers that we have blocked and removed from millions of computers since 2015. Xiazai is a software bundler that can sneak in additional changes. Xiazai does not insta...
CVE-2016-5411
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
Design/Logic Flaw
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
CVE-2016-5411
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
CVE-2016-5411
CVE-2016-5411 affects Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA. The file /var/lib/ovirt-engine/setup/engine-DC-config.py is world-readable and contains the deployed system’s root password, enabling potential information disclosure with high impact. The provided documents confirm thi...
Installer of QuickTime for Windows may insecurely load Dynamic Link Libraries
Overview Installer of QuickTime for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
Simeji for Windows Installer Untrusted Search Path Vulnerability
Simeji for Windows is a suite of Windows-based Japanese input method applications. An untrusted search path vulnerability exists in the installer simeji.exe in Simeji for Windows. The vulnerability can be exploited to gain privileges through a malicious DLL file in a directory...
TKY2JGD Installer Untrusted Search Path Vulnerability
TKY2JGD is a coordinate exchange software package released by the Geographical Survey of Japan GSI. An untrustworthy search path vulnerability exists in the installer TKY2JGD1379.EXE in TKY2JGD version 1.3.79. The vulnerability can be exploited to gain privileges via a malicious DLL file in the...
PT-2017-8721
Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI versions prior to 1.0 GA Description The issue concerns a file, /var/lib/ovirt-engine/setup/engine-DC-config.py, created by Red Hat QuickStart Cloud Installer QCI that is world readable and contains the...
PatchJGD (Hyoko) Installer Untrusted Search Path Vulnerability
PatchJGD Hyoko is a coordinate exchange software package released by the Japan Geographic Institute GSI. An untrusted search path vulnerability exists in the installer PatchJGDh101.EXE of PatchJGD Hyoko version 1.0.1. The vulnerability can be exploited to gain privileges via a malicious DLL in th...
SemiDynaEXE Installer Untrusted Search Path Vulnerability
SemiDynaEXE is a coordinate exchange software suite released by the Japan Geographic Institute GSI. An untrustworthy search path vulnerability exists in the installer SemiDynaEXE2008.EXE in SemiDynaEXE version 1.0.2. The vulnerability can be exploited to gain privileges via a malicious DLL file i...
CVE-2016-5411: Undefined Security Weakness
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
UBUNTU-CVE-2017-9324
In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...
DEBIAN-CVE-2017-9324
In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...
