CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-33708

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

CVE-2022-33709

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

SAMSUNG USB Driver 安全漏洞

Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...

Git for Windows 代码问题漏洞

Git for Windows is the Git groups' Git for Windows. A code issue vulnerability exists in versions prior to Git for Windows v2.37.1, which stems from the possibility that the installer can be tricked into executing untrusted binaries...

PT-2022-3619 · Unknown · Git For Windows

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.37.1 Description: The issue is related to the Git for Windows installer executing a binary into C:mingw64bingit.exe by mistake, which occurs only during a fresh install, not when upgrading. This is due to a...

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-33711

The CVE-2022-33711 issue affects Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0, due to improper validation of an integrity check. This enables local attackers to delete arbitrary directories via a directory junction. Affected component: Samsung USB Driver Window...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

Summary: CVE-2022-33737 affects OpenVPN Access Server installers. The issue arises because the installer creates a log file that is readable by everyone, and in OpenVPN Access Server versions 2.10.0 through 2.10.x (up to but not including 2.11.0) this log may contain a randomly generated administ...

PT-2022-21853 · Openvpn · Openvpn Access Server

Name of the Vulnerable Software and Affected Versions: OpenVPN Access Server versions 2.10.0 through 2.10.x and versions prior to 2.11.0, can be simplified to: OpenVPN Access Server versions 2.10.0 through 2.11.0, but since 2.11.0 is not included, it is more accurate to say: OpenVPN Access Server...

ABB e-Design Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of ABB e-Design. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

ABB e-Design Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB e-Design. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the e-Design installer...

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

CVE-2022-28619

The CVE-2022-28619 issue affects the HPE Version Control Repository Manager installer. Affected component: the VCRM installer (version 7.6.14.0 fixes the vulnerability). Root cause: an incorrectly programmed call to an advanced local procedure leads to an elevation of privilege. Impact: local esc...

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

The vulnerability of the Titan FTP Server NextGen installer allows a hacker to execute arbitrary commands with elevated privileges.

The vulnerability of the Titan FTP Server NextGen installer is related to errors during the installation of Microsoft SQL Express 2019. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...

The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the Yandex Browser installer allows a hacker to execute arbitrary code.

The vulnerability of the Yandex Browser installer exists due to the lack of checks for the loading of files such as dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll, and profapi.dll. Exploiting this vulnerability allows a hacker to execute arbitrary code...

MAL-2022-4223 Malicious code in krew-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05c9eed8b2219e5f2530bd892f00c18eab8bfc6f32a1065a0d73be249649498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...