7583 matches found
Intel® Server Configuration Utility Software Installer Advisory
Summary: Potential security vulnerabilities in the Intel® Server Configuration Utility software installer may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25075 Description: Unquoted search...
AMD Graphics Driver Data Forgery Issue Vulnerability
AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges t...
Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Apr 2023 - Includes Oracle April 2023 CPU plus CVE-2023-2597
Summary All applicable Java SE CVEs published by Oracle as part of their April 2023 Critical Patch Update plus CVE-2023-2597. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: ELM Installer, IBM Engineering Lifecycle...
New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers
A new malvertising campaign has been found to employ fake sites that masquerade as legitimate Windows news portal to propagate a malicious installer for a popular system profiling tool called CPU-Z. "This incident is a part of a larger malvertising campaign that targets other utilities like...
Malvertiser copies PC news site to deliver infostealer
The majority of malvertising campaigns delivering malicious utilities that we have tracked so far typically deceive victims with pages that are almost the exact replica of the software vendor being impersonated. For example, we have seen fake websites appearing like the real Webex, AnyDesk or...
November 7, 2023, update for Outlook 2013 (KB5002514)
November 7, 2023, update for Outlook 2013 KB5002514 This article describes update 5002514 for Microsoft Outlook 2013 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't...
Fedora 39 : chromium (2023-0b39dc9302)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...
The vulnerability of the NextGen Installer component affects the software platform Oracle Fusion Middleware’s NextGen OUI Framework. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the NextGen Installer component of the Oracle Global Lifecycle Management NextGen OUI Framework software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...
CVE-2023-3893
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
Zoom Client for Meetings < 5.14.5 Vulnerability (ZSB-23026)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23026 advisory. - Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated use...
Important: Red Hat Bug Fix Advisory: OpenShift Container Platform Assisted Installer version 2.26.1 release
Assisted Installer version 2.26.1 is now available for Red Hat OpenShift Container Platform. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images...
Google Android elevation of privilege vulnerability (CNVD-2023-98748)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of privilege checking in the Package Installer. An attacker can exploit this vulnerability to gain elevated privileges...
CVE-2023-3676
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes...
CVE-2016-1203
Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...
CVE-2016-1203
The CVE-2016-1203 issue affects SaAT Netizen installer and Netizen due to improper file verification, enabling remote, unauthenticated MitM attacks that may cause a malicious file to be downloaded and executed. Affected: SaAT Netizen installer <=1.2.0.424 and SaAT Netizen
CVE-2016-1203
Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...
PT-2023-10324 · Unknown · Saat Netizen +1
Name of the Vulnerable Software and Affected Versions: SaAT Netizen installer versions 1.2.0.424 and earlier SaAT Netizen versions 1.2.0.8 and earlier Description: The issue allows a remote unauthenticated attacker to conduct a man-in-the-middle attack due to improper file verification. A...
CVE-2023-47101
The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...
