Lucene search
+L

1243 matches found

Positive Technologies
Positive Technologies
added 2022/05/31 12:0 a.m.12 views

PT-2022-20769 · Knime · Knime Analytics Platform

Name of the Vulnerable Software and Affected Versions: KNIME Analytics Platform versions prior to 4.6.0 Description: The issue is related to the Windows installer of the KNIME Analytics Platform, which sets improper filesystem permissions. This affects versions of the platform below 4.6.0...

7.8CVSS7.5AI score0.0022EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/31 12:0 a.m.6 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00518EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.8 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00963EPSS
SaveExploits0References3
HackRead
HackRead
added 2022/05/06 6:25 p.m.38 views

USB-based Wormable Raspberry Robin Malware Targeting Windows Installer

By Deeba Ahmed The malware Raspberry Robin is distributed via external drives and uses Microsoft Standard installer to execute malicious commands.… This is a post from HackRead.com Read the original post: USB-based Wormable Raspberry Robin Malware Targeting Windows Installer...

3.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2022/05/06 11:10 a.m.40 views

USB-based Wormable Malware Targets Windows Installer

Credit: Red Canary Wormable malware dubbed Raspberry Robin has been active since last September and is wriggling its way through USB drives onto Windows machines to use Microsoft Standard Installer and other legitimate processes to install malicious files, researchers have found. Researchers at...

7.2AI score
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/05/06 11:7 a.m.28 views

Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices. Attributing the malware to a cluster named "Raspberry Robin," Red Canary researchers noted that the worm "leverages Windows Installer to reach out to...

0.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/05/06 12:0 a.m.4 views

PT-2022-11422 · Microsoft · Windows Installer

Name of the Vulnerable Software and Affected Versions: Windows Installer MSI built with InstallScript custom action affected versions not specified Description: A vulnerability has been reported in the Windows Installer MSI built with InstallScript custom action, which may allow privilege...

7.8CVSS7.3AI score0.0028EPSS
SaveExploits0References9
Prion
Prion
added 2022/05/05 5:15 p.m.22 views

Design/Logic Flaw

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in...

4.4CVSS7.5AI score0.00288EPSS
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:0 a.m.8 views

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.1CVSS6.3AI score0.00979EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/05/04 2:0 p.m.11 views

CVE-2022-28714

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.12 views

The vulnerability of the Windows Installer component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00491EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/05/03 12:0 a.m.2 views

PT-2022-3136 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be...

7.8CVSS9.3AI score0.04533EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/05/03 12:0 a.m.4 views

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

8.4CVSS7.4AI score0.00215EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2022/04/18 12:24 p.m.35 views

New SolarMarker Malware Variant Using Updated Techniques to Stay Under the Radar

Cybersecurity researchers have disclosed an advanced version of the SolarMarker malware that packs in new improvements with the goal of updating its defense evasion abilities and staying under the radar. "The recent version demonstrated an evolution from Windows Portable Executables EXE files to...

2.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/04/15 7:15 p.m.5 views

CVE-2022-24530

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS7.2AI score0.00518EPSS
SaveExploits0References3Affected Software26
NVD
NVD
added 2022/04/15 7:15 p.m.22 views

CVE-2022-24530

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS0.00518EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/15 7:15 p.m.0 views

CVE-2022-24530

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00518EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/15 7:15 p.m.8 views

CVE-2022-24499

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00963EPSS
SaveExploits0References3Affected Software26
OSV
OSV
added 2022/04/15 7:15 p.m.0 views

CVE-2022-24499

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00963EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/15 7:15 p.m.36 views

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

4.6CVSS7.6AI score0.00963EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder