Lucene search
+L

235 matches found

osv_ubuntu
osv_ubuntu
•added 2023/07/03 8:15 p.m.•16 views

UBUNTU-CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.8AI score0.00884EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•26 views

Nullsoft Scriptable Install System security vulnerability

Nullsoft Scriptable Install System is a professional open source system for creating Windows installers. A security vulnerability exists in Nullsoft Scriptable Install System NSIS versions prior to 3.09, which stems from improper handling of access control to the uninstaller directory...

5.3CVSS5.5AI score0.00884EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•11 views

CVE-2023-37378: Undefined Security Weakness

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS6AI score0.00884EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/07/03 12:00 a.m.•19 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

7.2AI score0.00884EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2023/07/03 12:00 a.m.•17 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

7.2AI score
SaveExploits0References12
Cvelist
Cvelist
•added 2023/07/03 12:00 a.m.•56 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.5AI score0.00884EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•18 views

PT-2023-4535

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 3.09 Description The issue is related to insufficient access control in the Nullsoft Scriptable Install System, which can be exploited by a remote attacker to elevate their privileges...

5.3CVSS6.1AI score0.00884EPSS
SaveExploits0References30
CVE
CVE
•added 2023/07/03 12:00 a.m.•95 views

CVE-2023-37378

CVE-2023-37378 concerns Nullsoft Scriptable Install System (NSIS) prior to 3.09, where an uninstaller directory’s access control is mishandled. This could enable an attacker with local access to abuse the uninstaller folder if NSIS is used on a system, potentially permitting escalation of privile...

5.3CVSS5.1AI score0.00884EPSS
SaveExploits0References10Affected Software1
Mend
Mend
•added 2023/07/03 12:00 a.m.•7 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

6.9CVSS0.00884EPSS
SaveExploits0References15
Debian CVE
Debian CVE
•added 2023/07/03 12:00 a.m.•88 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.3AI score0.00884EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2022/12/03 11:04 a.m.•324 views

Exploit for CVE-2022-44721

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falc...

2.7CVSS7.3AI score0.04999EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
•added 2022/11/02 12:00 a.m.•16 views

Kaspersky Endpoint Security Kavremover Executable

The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious individual to execute the executable file instead of the uninstaller, which is...

2.3CVSS5.6AI score
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/07/23 3:15 a.m.•19 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS7.2AI score0.00219EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/23 3:15 a.m.•12 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/23 3:15 a.m.•26 views

Spoofing

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

4.4CVSS7.6AI score0.00219EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/23 2:32 a.m.•34 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/23 2:32 a.m.•86 views

CVE-2022-36415

Scooter Software Beyond Compare is affected by a DLL hijacking vulnerability in its uninstaller for versions 1.8a through 4.4.2 installed via the EXE installer. The uninstaller loads DLLs from the Windows Temp folder and, if a standard user places malicious DLLs there and the uninstaller runs wit...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/23 12:00 a.m.•5 views

CVE-2022-36415: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS7.3AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/23 12:00 a.m.•15 views

PT-2022-23358 · Scooter · Beyond Compare

Name of the Vulnerable Software and Affected Versions: Scooter Beyond Compare versions 1.8a through 4.4.2 Description: A DLL hijacking issue exists in the uninstaller when installed via the EXE installer. The uninstaller attempts to load DLLs from the Windows Temp folder. If a standard user place...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/07/23 12:00 a.m.•17 views

Scooter Software Beyond Compare code issue vulnerabilities

Scooter Software Beyond Compare is content comparison tool software from Scooter Software. A security vulnerability exists in Scooter Software Beyond Compare versions 1.8a through 4.4.2 prior to 4.4.3 that originates from a DLL hijacking vulnerability in the uninstaller when installing the progra...

7.8CVSS7.3AI score0.00219EPSS
SaveExploits0References2
Rows per page
Query Builder