7406 matches found
CVE-2020-1078
Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.
CVE-2020-6477
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file...
Privilege escalation
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file...
CVE-2020-6477
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file...
UBUNTU-CVE-2020-6477
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file...
CVE-2020-6477
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file...
CVE-2020-9753
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
CVE-2020-9753
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
Code injection
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
CVE-2020-9753
CVE-2020-9753 concerns the Naver Whale Browser Installer prior to 1.2.0.5, which does not perform signature verification for the Flash installer. The connected records indicate a trust issue that could enable a forged installer to bypass security checks, with sources including NVD, Red Hat, and C...
CVE-2020-9753
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
Google Chrome Security Bypass Vulnerability (CNVD-2020-29301)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the installer in versions prior to Google Chrome 83.0.4103.61. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of a specially crafted website...
Naver Whale Browser Installer Data Forgery Issue Vulnerability
Naver Whale Browser is a web browser with a user-defined interface from Naver, Korea.Installer is the installer. A data forgery vulnerability exists in Naver Whale Browser Installer versions prior to 1.2.0.5, which originates from a Flash installer that does not support signature checking. An...
The vulnerability of the Extension Installer Service, a component of the Microsoft Visual Studio software development tool, allows a malicious individual to escalate their privileges.
The vulnerability of the Extension Installer Service in the Microsoft Visual Studio software development environment is related to improper handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
RATicate Group Hits Industrial Firms With Revolving Payloads
Researchers have unearthed a new cybercrime group, RATicate, which is behind several waves of malspam attacks targeting industrial companies with various information-stealing payloads – from LokiBot to Agent Tesla. At least six separate campaigns have been tied to RATicate, with the first wave...
PT-2020-6837 · Unknown +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5 through 12 Description: The issue is related to the Windows installer for PostgreSQL, which invokes system-provided executables without fully-qualified paths. This allows executables in the directory where the installe...
Canonical Subiquity Log Message Disclosure Vulnerability
Canonical Subiquity is an Ubuntu server installer from Canonical UK. A log information disclosure vulnerability exists in Canonical Subiquity used in Ubuntu Server. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability ar...
Vulnerability in packaging (CVE-2020-10733)
Windows installer runs executables from uncontrolled directories The Windows installer for PostgreSQL invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intend...