Windows ActiveX Installer Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

Froxlor Information Disclosure Vulnerability

Froxlor is a server administration control panel that can be used to manage multi-user or shared servers. An information disclosure vulnerability exists in Froxlor version 0.10.15 and earlier. The vulnerability stems from the installer writing configuration parameters, including passwords, to a...

Racer Live Companion installer suffers from dll hijacking vulnerability

Racer Live Companion is a live broadcasting aid based on Racer Open. There is a dll hijacking vulnerability in the installer of Racer Live Companion. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Kingsoft Wordmaster has a dll hijacking vulnerability

Kingsoft Wordsmith is a translation and foreign language learning software developed by Zhuhai Kingsoft Office Software Co. A dll hijacking vulnerability exists in the Kingsoft wordmaster installer. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Kingsoft Typewriter suffers from dll hijacking vulnerability

Kingsoft Typewriter is a typing software. A dll hijacking vulnerability exists in the Kingsoft Typewriter installer. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

KB4540693: Windows 10 March 2020 Security Update

The remote Windows host is missing security update 4540693. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

KB4538461: Windows 10 Version 1809 and Windows Server 2019 March 2020 Security Update

The remote Windows host is missing security update 4538461. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

KB4540670: Windows 10 Version 1607 and Windows Server 2016 March 2020 Security Update

The remote Windows host is missing security update 4540670. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

KB4541505: Windows 8.1 and Windows Server 2012 R2 March 2020 Security Update

The remote Windows host is missing security update 4541505 or cumulative update 4541509. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully...

KB4540689: Windows 10 Version 1803 March 2020 Security Update

The remote Windows host is missing security update 4540689. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

CVE-2020-10237

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...

CVE-2020-10237

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...

Design/Logic Flaw

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...

CVE-2020-10237

Mode C: CVE-2020-10237 affects Froxlor up to 0.10.15. The installer writes configuration data, including passwords, to files in /tmp and only restores proper permissions after writing the sensitive data, enabling potential local disclosure if the file is read at the right time via _createUserdata...

Western Digital WesternDigitalSSDDashboardSetup.exe Code Issue Vulnerability

Western Digital WesternDigitalSSDDashboardSetup.exe is an installer for SSD performance monitoring dashboard software from Western Digital. A code issue vulnerability exists in Western Digital WesternDigitalSSDDashboardSetup.exe versions prior to 3.0.2.0. An attacker could exploit this...

Red Software PDFescape Desktop Code Issue Vulnerability

Red Software PDFescape Desktop is the United States Red Software's set of PDF document editing tools. The product supports PDF document editing, conversion and merging. A code issue vulnerability exists in the installer in Red Software PDFescape Desktop 4.0.22 and prior versions. The vulnerabilit...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Design/Logic Flaw

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

CVE-2020-9418 affects PDFescape Desktop (≤ 4.0.22). The installer is vulnerable to DLL hijacking due to an untrusted search path, enabling local privilege elevation and code execution. Affected component: installer binary; root cause: DLL search order/location handling. Exploitation is described ...