KB4577671: Windows 10 Version 1903 and Windows 10 Version 1909 October 2020 Security Update

The remote Windows host is missing security update 4577671. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

KB4580327: Windows 10 October 2020 Security Update

The remote Windows host is missing security update 4580327. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

KB4580328: Windows 10 Version 1709 October 2020 Security Update

The remote Windows host is missing security update 4580328 or 4577041. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security...

KB4580330: Windows 10 Version 1803 October 2020 Security Update

The remote Windows host is missing security update 4580330. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights.

...

CVE-2019-16000

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

Design/Logic Flaw

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000

CVE-2019-16000 affects the Cisco Umbrella Roaming Client for Windows. The issue is in the automatic update process where Windows Installer verification is insufficient, allowing an authenticated, local attacker to place a file in a specific location and bypass policy to install unapproved applica...

CVE-2020-10733

CVE-2020-10733 affects the Windows PostgreSQL installer (versions 9.5 through 12). The root cause is that the installer invokes system-provided executables without fully-qualified paths, so executables in the load directory or current working directory can be chosen instead of the intended ones. ...

CVE-2020-7311

Privilege Escalation vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files...

CVE-2020-7311

Privilege Escalation vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2020-3677 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing vulnerability exists when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. In an...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

MAMP PRO 4.2.0 Local Privilege Escalation Vulnerability

Exploit Title: MAMP PRO 4.2.0 Local Privilege Escalation Exploit Author: b1nary Vendor Homepage: https://www.mamp.info/ Software Link: https://downloads.mamp.info/MAMP-PRO-WINDOWS/releases/4.2.0/MAMPMAMPPRO4.2.0.exe Version: 4.2.0 Tested on: Windows 10 Pro x64 Version 10.0.19041 MAMPPRO Windows...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-13162

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows which runs as NT AUTHORITY/SYSTEM allows unprivileged users to run a Microsoft Installer executable with elevated privileges...