Description of the security update for Office 2013: September 14, 2021 (KB5002007)

Description of the security update for Office 2013: September 14, 2021 KB5002007 Summary This security update resolves Microsoft Office graphics remote code execution vulnerabilities. To learn more about the vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2021-38658 and...

PT-2021-6977 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient input validation in the Windows Installer service, which can be exploited to cause a denial of service. This allows an attacker to affect the...

Microsoft Windows Installer信息泄露漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An information disclosure vulnerability exists in microsoft Windows Installer. The following products and editions are affected:Windows...

Microsoft Windows Installer 输入验证错误漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An input validation error vulnerability exists in microsoft Windows Installer. The following products and versions are affected: Window...

Moderate: Red Hat Enhancement Advisory: OpenShift Container Platform Assisted Installer version 1.0.25 release

Assisted Installer version 1.0.25 is now available for Red Hat OpenShift Container Platform. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images...

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

CVE-2021-22004

An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software...

UBUNTU-CVE-2021-22004

An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software...

PT-2021-14842 · Saltstack +1 · Saltstack Salt +1

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3003.3 Description: An issue was discovered that allows a malicious actor to subvert the proper behavior of the minion software. This occurs when the salt minion installer accepts and uses a minion config file...

SaltStack Salt竞争条件问题漏洞

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack. The tool provides configuration management, remote execution, and other features. A competitive condition issue vulnerability exists in SaltStack Salt versions prior to Salt 3003.3, which stems from the fact...

CVE-2021-33484

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a hardcoded IV used to encrypt the username and userid in the comment POST request. Additionally, the attacker can decrypt the encrypted...

September 7, 2021, update for Office 2016 (KB4484467)

None None...

ISC BIND Unquoted Path Vulnerability (CVE-2017-3141) - Windows

ISC BIND on Windows is prone to an unquoted path vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

The vulnerability of the Adobe Application Manager installer, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Application Manager installer is related to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2021-36002

Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...

CVE-2021-36002 Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation

Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...

The vulnerability of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, is related to insufficient protection of the web page structure, allowing a hacker to execute arbitrary code.

The vulnerabilities of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, are related to insufficient protection of the web page structure. Exploiting these vulnerabilities allows a malicious actor to execute...

CVE-2021-28633

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

CVE-2021-28594

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28594

The CVE-2021-28594 entry concerns Adobe Creative Cloud Desktop Application installer (2.4 and earlier). The vulnerability is an Uncontrolled Search Path Element in the installer, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a ...