7404 matches found
CVE-2020-8895
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
Design/Logic Flaw
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
CVE-2020-8895 DLL Hijacking in Google Earth Pro Windows installer
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...
Description of the Office 2013 update: March 12, 2013
Description of the Office 2013 update: March 12, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains stability and performance improvements. Issu...
Description of the Office 2013 update: September 10, 2013
Description of the Office 2013 update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains...
Malicious Package
Overview atlassian-plugininstaller is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Microsoft Visual Studio Extension Installer Service Elevation of Privilege Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio Extension Installer Servic...
Intel Binary Configuration Tool Code Issue Vulnerability
Intel Binary Configuration Tool is an Intel utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in the installer in the Intel Binary Configuration Tool for Windows-based platforms. The vulnerability can be...
Intel Data Migration Software Elevation of Privilege Vulnerability
Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...
CVE-2020-0598
Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-0547
Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Default configuration
Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-0598
Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-0547
CVE-2020-0547 affects Intel® Data Migration Software versions 3.3 and earlier. The root cause is incorrect default permissions in the installer, enabling an authenticated user to potentially elevate privileges via local access. Public details from Intel’s advisory (Intel® Data Migration Software ...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...
CVE-2020-0900
CVE-2020-0900 describes an elevation of privilege vulnerability in the Visual Studio Extension Installer Service caused by improper handling of file operations. An attacker with local access could log on and run a specially crafted application to exploit this flaw. Microsoft’s MSRC advisory and t...
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...