1354 matches found
PT-2020-6837 · Unknown +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5 through 12 Description: The issue is related to the Windows installer for PostgreSQL, which invokes system-provided executables without fully-qualified paths. This allows executables in the directory where the installe...
Vulnerability in packaging (CVE-2020-10733)
Windows installer runs executables from uncontrolled directories The Windows installer for PostgreSQL invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intend...
CVE-2020-5896
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
Design/Logic Flaw
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5896
CVE-2020-5896 affects BIG-IP Edge Client for Windows. The Windows Installer Service’s temporary folder in versions 7.1.5–7.1.9 has weak file/folder permissions, enabling potential privilege escalation. Advisory details indicate that signed executables and MSI files could be executed from the temp...
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations. To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an...
KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of...
KLA11773 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...
Google Earth Pro Remote Code Execution Vulnerability
Google Earth Pro is a 3D interactive globe from Google USA, which presents a 3D representation of the Earth based primarily on satellite imagery. A security vulnerability exists in the Windows installer of Google Earth Pro versions prior to 7.3.3. A remote attacker can exploit the vulnerability t...
CVE-2020-8895
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
CVE-2020-8895
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
Design/Logic Flaw
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
CVE-2020-8895
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
CVE-2020-8895 DLL Hijacking in Google Earth Pro Windows installer
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
Intel Binary Configuration Tool Code Issue Vulnerability
Intel Binary Configuration Tool is an Intel utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in the installer in the Intel Binary Configuration Tool for Windows-based platforms. The vulnerability can be...
Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: July 28, 2009
Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...
Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform
Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...
MS12-059: Description of the security update for Visio 2010 Viewer: August 14, 2010
MS12-059: Description of the security update for Visio 2010 Viewer: August 14, 2010 View products that this article applies to. Introduction Microsoft has released security bulletin MS12-059. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...
MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009
MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009 INTRODUCTION Microsoft has released security bulletin MS09-062. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...
Description of the security update for Microsoft Visual Studio 2008: July 28, 2009
Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...