12105 matches found
CVE-2020-11613
Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default, the Authenticated Users group has Modify permissions to the installation folder. Because of this, any user on the system can...
CVE-2020-0204
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges...
KLA11810 Security Advisory for Adobe Flash
Original advisories ADV200010 APSB20-30 Exploitation Related products Adobe-Flash CVE list KB list 4561600 Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows Update usually can be accessed from the Control Panel Affected Products - Adobe Flash...
Fedora: Security Advisory for cacti-spine (FEDORA-2020-d50b988a2f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for kernel (FEDORA-2020-5436586091)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Apple Security Update: watchOS 6.2.6
Apple recommends to install security update watchOS 6.2.6 on devices Apple Watch Series 1 and later...
Apple Security Update: tvOS 13.4.6
Apple recommends to install security update tvOS 13.4.6 on devices Apple TV 4K and Apple TV HD...
PT-2020-7767
Name of the Vulnerable Software and Affected Versions: Lexiglot versions prior to 2014-11-20 Description: The issue allows for XSS Reflected via the username or XSS Stored via the "admin.php?page=config" endpoint, specifically through the install name, intro message, or new file content parameter...
Apple Security Update: tvOS 13.4.6
Apple recommends to install security update tvOS 13.4.6 on devices Apple TV 4K and Apple TV HD...
openSUSE: Security Advisory for libmspack (openSUSE-SU-2020:0746-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for unbound (FEDORA-2020-8e9b62948e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-9045
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
CVE-2020-9045
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
Information disclosure
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
CVE-2020-9045
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
CVE-2020-9045: Cleartext Storage of Sensitive Information
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
CVE-2020-1126: Out-of-bounds Write
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...
PT-2020-20458 · Software House +1 · Software House Ccure 9000 +1
Name of the Vulnerable Software and Affected Versions: Software House C•CURE 9000 version 2.70 American Dynamics victor Video Management System version 5.2 Description: The issue concerns the logging of user credentials during the installation or upgrade process. When installing or upgrading to t...
Microsoft Store Install Service Privilege Escalation
The vulnerability of the Microsoft Store Install Service for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...