CVE-2021-20198

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...

CVE-2021-20198

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...

CVE-2021-20198

OpenShift CVE-2021-20198 affects the OpenShift Installer during OpenShift Container Platform 4 cluster installation: bootstrap nodes are provisioned with anonymous authentication on kubelet port 10250, allowing unauthenticated /exec requests to run commands in containers. This is addressed in Red...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the software installer for Intel Optane DC Persistent Memory, which allows a hacker to enhance their privileges.

The vulnerability of the software installer for Intel Optane DC Persistent Memory, which operates on non-volatile memory, is related to improper handling of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the installer of microprogramming software for the onboard video driver of the Server Board affects Windows systems. This vulnerability allows a hacker to exploit their privileges.

The vulnerability of the installer of microprogramming software for the onboard video driver of the Server Board occurs due to incorrect handling of the search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2020-36233

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

Design/Logic Flaw

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2020-36233

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2020-8765

Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8701

Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24451

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24451

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24451

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8765

CVE-2020-8765 affects Intel RealSense Depth Camera Manager (DCM) installers. The Intel advisory details that incorrect default permissions in the DCM installer may allow a privileged local user to escalate privileges. Affected products include Intel RealSense DCM F200 (before 1.5), DCM R200 (befo...

CVE-2020-8765

Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8701

CVE-2020-8701 affects Intel(R) SSD Toolbox installer prior to 2/9/2021, where incorrect default permissions could let a local, privileged user escalate privileges. The issue is documented in the Intel advisory INTEL-SA-00457, which states Intel did not release mitigations for this vulnerability a...

CVE-2021-21045 Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current use...

CVE-2021-0305

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9...