7565 matches found
CVE-2022-31218
CVE-2022-31218 details (connected docs) show an ABB Drive Composer‑related local privilege escalation. The vulnerability stems from improper privilege management in the Drive Composer installer, enabling a low‑privileged user to create and write a file anywhere on the file system as SYSTEM with a...
CVE-2021-40776 Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
Adobe Lightroom Classic 10.3 and earlier are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this...
PT-2022-20617 · Unknown · Drive Composer
Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content, provided the file does not already exist...
PT-2022-20616 · Unknown · Drive Composer
Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content, provided the file does not already exist...
Zoom Client 代码问题漏洞
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Opener installer for Zoom Client versions prior to 5.10.3 and Zoom Rooms for Conference Room for Windows versions prior to 5.10.3, which can be...
PT-2022-20615 · Abb · Abb Automation Builder
Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified ABB Automation Builder affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary...
PT-2022-20614 · Abb · Abb Automation Builder +1
Name of the Vulnerable Software and Affected Versions: ABB Automation Builder Drive Composer affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content, provided the file does n...
CVE-2022-31216
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...
Windows Installer Elevation of Privilege Vulnerability
...
Siemens SINEMA Remote Connect Server 安全漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A security vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from a system image...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows Server 2012...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
Privilege escalation
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-2017-20018
A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely...
XAMPP 代码问题漏洞
XAMPP is an integrated installation package for apache, PHP, Perl and MySQL from the US-based Apache Friends team. The product is primarily used for building web servers. A security vulnerability exists in XAMPP 7.1.1-0-VC14, which stems from an unknown feature of the component installer. An...
June 7, 2022, update for Office 2016 (KB5002182)
None None...
CVE-2022-27438
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...