235 matches found
PT-2023-7561 · Unknown · Digital Guardian Agent
Name of the Vulnerable Software and Affected Versions: Digital Guardian Agent versions prior to 7.9.4 Description: The issue is related to the unprotected storage of sensitive information in the Digital Guardian Agent. This allows a local attacker to retrieve the uninstall key and remove the...
CVE-2021-26736
CVE-2021-26736 concerns Zscaler Client Connector Installer and Uninstaller for Windows prior to version 3.6. The vulnerability allows a local attacker to execute binaries from a low-privilege path, potentially gaining SYSTEM privileges. Affected component: the Windows installer/uninstaller. Root ...
CVE-2021-26736: Improper Input Validation
Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges...
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target...
Trend Micro Endpoint security products for enterprises vulnerable to arbitrary code execution
Overview Trend Micro Endpoint security products for enterprises provided by Trend Micro Incorporated contain an arbitrary code execution vulnerability CWE-94, CVE-2023-41179 in 3rd Party AV Uninstaller Module. Trend Micro Incorporated states that an attack exploiting this vulnerability has been...
CVE-2023-41179
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One on-prem and SaaS, Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that a...
CVE-2023-41179
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One on-prem and SaaS, Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that a...
CVE-2023-41179
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One on-prem and SaaS, Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that a...
CVE-2023-41179
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One on-prem and SaaS, Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that a...
CVE-2023-41179
CVE-2023-41179 affects Trend Micro Apex One (on‑prem and SaaS) and Worry‑Free Business Security products, via a vulnerability in the third‑party AV uninstaller module that could allow arbitrary code execution. An attacker must have administrative console access to exploit the issue, and the vulne...
PT-2023-5267
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS versions affected versions not specified Worry-Free Business Security versions affected versions not specified Worry-Free Business Security Services versions affected versions not specified Description A...
VulnCheck KEV: CVE-2023-41179
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target...
Trend Micro Apex One Security Vulnerability
Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex One on-prem, SaaS, Worry-Free Business Security, Worry-Free Business Security Services could stem from a security issue in the 3rd party AV uninstaller module. The...
CVE-2023-41179: Improper Control of Generation of Code
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One on-prem and SaaS, Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that a...
Mozilla Thunderbird Security Advisories (MFSA2023-29, MFSA2023-32) - Mac OS X
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
MGASA-2023-0236 Updated mingw-nsis packages fix security vulnerability
Mishandles access control for an uninstaller directory. CVE-2023-37378...
Mishandled Access Control
The NSIS Nullsoft Scriptable Install System is vulnerable to Access Control Vulnerability. The vulnerability is due to not restricting or incorrectly restricting access to an uninstaller directory from an unauthorized actor leading to priviledge escalation...
CVE-2023-37378
Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...
