CVE-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

CVE-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

PTC Kepware KEPServerEX Security Vulnerability

PTC Kepware KEPServerEX is an industrial automation data connectivity solution from PTC Corporation. A security vulnerability exists in PTC Kepware KEPServerEX 6.14.263.0 and earlier versions, which stems from the vulnerability of KEPServerEX's installer to DLL search order hijacking, which could...

PT-2023-15443 · Razer · Razer Synapse

Name of the Vulnerable Software and Affected Versions: Razer Synapse versions 3.7.1209.121307 and earlier Description: The issue allows for privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%RazerSynapse3Servicebin...

The vulnerability of the Node.js software platform installation process (.msi version) allows a perpetrator to escalate their privileges within the system.

The vulnerability of the Node.js software platform’s installation process version .msi is related to the use of an unreliable search path. Exploiting this vulnerability allows a malicious actor to escalate their privileges within the system...

PT-2023-27494 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of LG Simple Editor. To exploit this, an attacker must first obtain the ability to execute...

CVE-2023-28823

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25773

Improper access control in the IntelR UniteR Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27505

Intel’s advisory CVE-2023-27505 applies to Intel® Advanced Link Analyzer Standard Edition installers prior to version 22.1.1, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The vulnerability affects the installer component and is rated...

CVE-2023-22841

Unquoted search path in the software installer for the System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-20293 · Intel · Intel Unite Hub

Name of the Vulnerable Software and Affected Versions: IntelR UniteR Hub software installer for Windows versions prior to 4.2.34962 Description: The issue is related to improper access control in the IntelR UniteR Hub software installer for Windows, which may allow an authenticated user to...

The vulnerability of the platform installer for SAP BusinessObjects Business Intelligence allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to influence the confidentiality, integrity, and accessibility of the protected information by...

PT-2023-12989 · Intel · Intel Csme Software Installer

Name of the Vulnerable Software and Affected Versions: IntelR CSME software installer versions prior to 2239.3.7.0 Description: The issue is related to improper access control in the IntelR CSME software installer, which may allow an authenticated user to potentially enable escalation of privileg...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

Design/Logic Flaw

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

CVE-2023-36540 affects Zoom Desktop Client for Windows prior to 5.14.5. The vulnerability arises from an untrusted search path in the installer, which may allow an authenticated local user to escalate privileges. Affected product/version: Zoom Desktop Client for Windows

CVE-2023-37490

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the...