4349 matches found
CVE-2020-9858
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...
Code injection
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...
CVE-2020-9858
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...
CVE-2020-9858
CVE-2020-9858 relates to Apple Windows Migration Assistant. It describes a dynamic library loading issue in the Windows Installer component; running the installer from an untrusted directory could allow arbitrary code execution. The vulnerability is addressed in Windows Migration Assistant versio...
June 9, 2020—KB4557957 (OS Build 19041.329)
None None...
PT-2020-20811
Name of the Vulnerable Software and Affected Versions Windows Migration Assistant versions prior to 2.2.0.0 v. 1A11 Description A dynamic library loading issue was addressed with improved path searching. Running the installer in an untrusted directory may result in arbitrary code execution...
CVE-2020-9858: Uncontrolled Search Path Element
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...
Elastic Kibana 6.7.0 < 6.8.9, 7.x <= 7.6.2 Prototype Pollution Vulnerability - Linux
Kibana is prone to a prototype pollution vulnerability in the Upgrade Assistant. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Elasticsearch Kibana Code Injection Vulnerability (CNVD-2020-38065)
Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A code injection vulnerability exists in Upgrade Assistant in Elasticsearch Kibana versions 6.7.0 through 6.8.8 and 7.0.0 through 7.6.2. An attacker can...
CVE-2020-7012
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
CVE-2020-7012
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
CVE-2020-7012
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
Design/Logic Flaw
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
CVE-2020-7012
CVE-2020-7012 affects Elastic Kibana; prototype pollution in the Upgrade Assistant allows an authenticated attacker with write access to the Kibana index to trigger arbitrary code execution with the Kibana process privileges. Affected versions include Kibana 6.7.0–6.8.8 and 7.0.0–7.6.2 (per mult...
CVE-2020-7012
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
Elastic Stack 6.8.9 and 7.7.0 security update
Kibana upgrade assistant prototype pollution flaw ESA-2020-05 Kibana versions between 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to...
PT-2020-19337
Name of the Vulnerable Software and Affected Versions Kibana versions 6.7.0 through 6.8.8 Kibana versions 7.0.0 through 7.6.2 Description The issue is related to a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could inser...
CVE-2020-7012: Improper Control of Generation of Code
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker...
CVE-2020-1809
HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143C00E143R2P4 have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone...
CVE-2020-1809
HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143C00E143R2P4 have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone...