7574 matches found
CVE-2022-41975
RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode...
The vulnerability of the implementation of executable files of the IntelliJ IDEA software installer allows a perpetrator to execute arbitrary code.
The vulnerability of the executable file installation mechanism of the IntelliJ IDEA integrated development environment is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to execute arbitrary code...
RealVNC VNC Server 安全漏洞
RealVNC VNC Server is a VNC server for remote access software from RealVNC UK. A security vulnerability exists in RealVNC VNC Server versions prior to 6.11.0 and VNC Viewer versions prior to 6.22.826. An attacker has exploited the vulnerability to perform a local elevation of privilege via MSI...
PT-2022-5791 · Realvnc +1 · Realvnc Viewer +2
Name of the Vulnerable Software and Affected Versions: RealVNC VNC Server versions prior to 6.11.0 RealVNC VNC Viewer versions prior to 6.22.826 on Windows Description: The issue is related to insecure privilege management in RealVNC, allowing an attacker to escalate their privileges by exploitin...
CVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
Design/Logic Flaw
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
CVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
CVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
CVE-2022-23952
CVE-2022-23952 affects Keylime before version 6.3.0, where the installer writes the keylime.conf file with world-readable permissions, potentially exposing sensitive data contained in that config. The root cause is improper file permissions during installation, as described across multiple adviso...
CVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...
The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, allows a hacker to execute arbitrary code or enhance their privileges on Windows operating systems.
The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, exists on Windows operating systems. It involves the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privilege...
Buffer Overflow
freeciv, sid is vulnerable to buffer overflow.This vulnerability exits in the modpack installer due to the handling of the modpack url which allows an attacker to cause memory corruption...
CVE-2022-38764
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...
CVE-2022-38764
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...
CVE-2022-38764
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...
Design/Logic Flaw
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...
CVE-2022-38764
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...
CVE-2022-40978
The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...