CVE-2021-0100

Incorrect default permissions in the installer for the IntelR SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0100

The CVE-2021-0100 issue affects Intel SSD Data Center Tool (Intel DCT) versions downloaded before 31 Dec 2020, due to incorrect default permissions in the installer. This could allow an authenticated local user to escalate privileges (local access). Multiple connected sources confirm the impact a...

CVE-2021-0074

Improper permissions in the installer for the IntelR Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0074

The connected Intel advisory (Intel-SA-00530) confirms CVE-2021-0074 affects Intel® Computing Improvement Program software prior to version 2.4.5982, where improper installer permissions could allow an authenticated user to escalate privileges via local access. remediation: update to version 2.4....

Intel VTune Profiler 权限许可和访问控制问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability in the installer of IntelR...

Vulnerability fixed in Citrix Cloud Connector

Citrix has discovered a vulnerability in the Cloud Connector client application. When the client is installed using command line parameters, these parameters are stored in readable text in the installation log file. These parameters may contain sensitive data, which a malicious person with access...

SUSE: Security Advisory (SUSE-SU-2021:0109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-28594

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28633

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

Description of the security update for Office 2016: June 8, 2021 (KB5001950)

None None...

Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Installer. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windo...

PT-2021-6633 · Adobe · Photoshop Elements

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Elements versions 5.2 and earlier Description: The issue is related to the creation of temporary files with insecure permissions in Adobe Photoshop Elements. An unauthenticated attacker could exploit this to call functions...

CVE-2021-1537

A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the...

CVE-2021-1537

A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the...

Design/Logic Flaw

A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the...

CVE-2021-1537

CVE-2021-1537 affects Cisco ThousandEyes Recorder installer and allows an unauthenticated, local attacker to access sensitive information embedded in the installer. Root cause: sensitive data included in the installer package. Impact: information disclosure with partial confidentiality impact (pe...

CVE-2021-1537 Cisco ThousandEyes Recorder Information Disclosure Vulnerability

A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the...

PT-2021-6306 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Installer component of the Microsoft Windows operating system. This vulnerability can be exploited t...

OPENSUSE-SU-2021:0829-1 Security update for opera

This update for opera fixes the following issues: Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: “Use old password” button doesn’t work -...