Lucene search
+L

1505 matches found

zdt
zdt
•added 2016/10/27 12:00 a.m.•76 views

Apache OpenOffice 4.1.2 Privilege Escalation Vulnerability

Exploit for multiple platform in category local exploits CVE-2016-6804 Apache OpenOffice Advisory Title: Windows Installer Execution of Arbitrary Code with Elevated Privileges Version 1.0 Announced October 11, 2016 Description The Apache OpenOffice installer for Windows contained a defective...

9.3CVSS7.5AI score0.03011EPSS
SaveExploits1
Microsoft KB
Microsoft KB
•added 2016/09/13 12:00 a.m.•28 views

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

6.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/08/17 7:12 a.m.•20 views

Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer Version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer Version contains an issue with the DLL search path, which may lead to insecurely loading dynamic linking...

9.3CVSS6.9AI score0.01475EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•16 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

A vulnerability that allows for increased privileges exists in the Windows installer. This vulnerability is related to incorrect restoration of previously installed applications. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the...

7.2CVSS6AI score0.01962EPSS
SaveExploits0References3
OSV
OSV
•added 2016/06/16 2:59 p.m.•18 views

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

7.3CVSS5.8AI score0.00711EPSS
SaveExploits0References1
OSV
OSV
•added 2016/05/30 1:59 a.m.•16 views

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

7.8CVSS5.8AI score0.00904EPSS
SaveExploits0References3
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•17 views

Unspecified Vulnerability in Oracle VM VirtualBox Windows Installer Component

Oracle VM VirtualBox is an open source virtual machine software from Oracle. An unspecified vulnerability in the Windows Installer component of Oracle VM VirtualBox allows local attackers to exploit the vulnerability to elevate privileges and cause unauthorized disclosure of information...

6.2CVSS8.1AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2016/01/21 3:02 a.m.•37 views

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

6.2CVSS5.4AI score0.00433EPSS
SaveExploits0References4
OSV
OSV
•added 2016/01/21 3:02 a.m.•4 views

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

7.3AI score0.00433EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/01/21 3:02 a.m.•30 views

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

6.2CVSS7.1AI score0.00433EPSS
SaveExploits0References3
Prion
Prion
•added 2016/01/21 3:02 a.m.•23 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

6.2CVSS6AI score0.00433EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2016/01/21 2:00 a.m.•39 views

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

6.2CVSS4.8AI score0.00433EPSS
SaveExploits0
Cvelist
Cvelist
•added 2016/01/21 2:00 a.m.•45 views

CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

5.4AI score0.00433EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/21 12:00 a.m.•6 views

CVE-2016-0602: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU...

6.2CVSS6.2AI score0.00433EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2016/01/21 12:00 a.m.•80 views

Oracle VM VirtualBox < 4.3.36 / 5.0.14 Multiple Vulnerabilities (January 2016 CPU)

The Oracle VM VirtualBox application installed on the remote host is a version prior to 4.3.36 or 5.0.14. It is, therefore, affected by the following vulnerabilities : - An unspecified vulnerability exists in the Core subcomponent that allows a remote attacker to affect the availability of the...

6.2CVSS7.2AI score0.03342EPSS
SaveExploits0References5
CNVD
CNVD
•added 2015/07/16 12:00 a.m.•14 views

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04664)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the Windows Installer service for Microsoft Windows. A local attacker can exploit the vulnerability to gain privileges via custom acti...

6.9CVSS6.9AI score0.01536EPSS
SaveExploits0References1
NVD
NVD
•added 2015/07/14 10:59 p.m.•39 views

CVE-2015-2371

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

6.9CVSS6.3AI score0.01536EPSS
SaveExploits0References2
Prion
Prion
•added 2015/07/14 10:59 p.m.•29 views

Code injection

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

6.9CVSS6.8AI score0.01536EPSS
SaveExploits0References2Affected Software4
CVE
CVE
•added 2015/07/14 10:00 p.m.•112 views

CVE-2015-2371

CVE-2015-2371 corresponds to a Windows Installer Service elevation-of-privilege issue. A local attacker can escalate privileges by abusing a custom action script within an MSI package, affecting multiple Windows editions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, W...

6.9CVSS6.4AI score0.01536EPSS
SaveExploits0References2Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/14 12:00 a.m.•5 views

CVE-2015-2371: Undefined Security Weakness

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

6.9CVSS5.8AI score0.01536EPSS
SaveExploits0References2
Rows per page
Query Builder