CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2020-10733

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to attacks involving PostgreSQL. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Robotic Process...

Design/Logic Flaw

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

CVE-2020-18169

TechSmith Snagit version 19.1.1.2860 is affected by a privilege-escalation issue in the Windows installer XML (WiX) toolset. The vulnerability is described as enabling elevation of privileges via the Snagit installer, with the caveat that exploitation requires the user to bypass other OS safety m...

TechSmith SnagIT 安全漏洞

Techsmith TechSmith SnagIT is a set of screen capture software from Techsmith USA. The software is mainly used to take screenshots and record videos on the screen. A security vulnerability exists in TechSmith Snagit, which stems from a vulnerability in the Windows installer XML WiX toolset in...

PT-2021-10146

Name of the Vulnerable Software and Affected Versions: TechSmith Snagit version 19.1.1.2860 Description: A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit allows attackers to escalate privileges. The exploitation of the Snagit installer would require the end user to...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66087)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Windows Installer in Microsoft...

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-33765

Windows Installer Spoofing Vulnerability...

CVE-2021-33765

Windows Installer Spoofing Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

Windows Installer Spoofing Vulnerability

...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Windows Installer in Microsoft...

PT-2021-4798 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows Installer component in Microsoft Windows operating systems. This can allow...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected:Windows Server 2019...

PT-2021-6965 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component, allowing an attacker to potentially elevate their privileges. This could affect the system, but...

July 2021 Security Releases

July 2021 Security Releases Update 1-Jul-2021 Security releases available Updates are now available for v16.x, v14.x, and v12.x Node.js release lines for the following issues. libuv upgrade - Out of bounds read Medium CVE-2021-22918 Node.js is vulnerable to out-of-bounds read in libuv's...

Node.js -- July 2021 Security Releases

Node.js reports: libuv upgrade - Out of bounds read Medium CVE-2021-22918 Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII. This is called by Node's dns module's lookup function and can lead to information disclosures or...

The vulnerability of the RabbitMQ message broker installer for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the RabbitMQ message broker installer for Windows operating systems is related to deficiencies in access control for directories of connected modules. Exploiting this vulnerability could allow an attacker to execute arbitrary code...