VulnCheck KEV: CVE-2023-41179

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target...

PT-2023-5267

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS versions affected versions not specified Worry-Free Business Security versions affected versions not specified Worry-Free Business Security Services versions affected versions not specified Description A...

Trend Micro Apex One Security Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex One on-prem, SaaS, Worry-Free Business Security, Worry-Free Business Security Services could stem from a security issue in the 3rd party AV uninstaller module. The...

Mozilla Thunderbird Security Advisories (MFSA2023-29, MFSA2023-32) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

MGASA-2023-0236 Updated mingw-nsis packages fix security vulnerability

Mishandles access control for an uninstaller directory. CVE-2023-37378...

Mishandled Access Control

The NSIS Nullsoft Scriptable Install System is vulnerable to Access Control Vulnerability. The vulnerability is due to not restricting or incorrectly restricting access to an uninstaller directory from an unauthorized actor leading to priviledge escalation...

DEBIAN-CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

UBUNTU-CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

Nullsoft Scriptable Install System 安全漏洞

Nullsoft Scriptable Install System is a professional open source system for creating Windows installers. A security vulnerability exists in Nullsoft Scriptable Install System NSIS versions prior to 3.09, which stems from improper handling of access control to the uninstaller directory...

PT-2023-4535

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 3.09 Description The issue is related to insufficient access control in the Nullsoft Scriptable Install System, which can be exploited by a remote attacker to elevate their privileges...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

CVE-2023-37378 concerns Nullsoft Scriptable Install System (NSIS) prior to 3.09, where an uninstaller directory’s access control is mishandled. This could enable an attacker with local access to abuse the uninstaller folder if NSIS is used on a system, potentially permitting escalation of privile...

Exploit for CVE-2022-44721

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falc...

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility allows a malicious actor to execute the executable file instead of the uninstaller.

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious individual to execute the executable file instead of the uninstaller, which is...

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...