Directory traversal

DISPUTED The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure...

CVE-2019-13404

The CVE-2019-13404 entry concerns the MSI installer for Python <2.7.17 (and 3.x

CVE-2019-13404

The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...

PT-2019-13316 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.7.17 Python versions 3.x prior to 3.5 Description: The MSI installer for Python on Windows defaults to the C:Python27 directory, making it easier for local users to deploy Trojan horse code. The vendor's position is...

The vulnerability of the installation program for the OpenVINO toolset for Linux operating systems allows a hacker to disclose protected information.

The vulnerability of the installation program for the OpenVINO application development suite on Linux operating systems is related to security mechanism errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...

The vulnerability of the software for installing the Intel Data Center Manager SDK lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the software for installing the Intel Data Center Manager SDK suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Intel Chipset Device Software Elevation of Privilege Vulnerability

Intel Chipset Device Software is a chipset firmware update utility from Intel Corporation USA. A security vulnerability exists in the installer in Intel Chipset Device Software INF Update Utility versions prior to 10.1.1.45. A local attacker can exploit the vulnerability to elevate privileges...

The vulnerability of the ITE Tech Consumer Infrared Driver installation program allows a violator to increase their privileges.

The vulnerability of the ITE Tech Consumer Infrared Driver installation program is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Intel Turbo Boost Max Technology driver installation program allows a hacker to increase their privileges.

The vulnerability of the Intel Turbo Boost Max Technology driver installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

New Mac cryptominer Malwarebytes detects as Bird Miner runs by emulating Linux

A new Mac cryptocurrency miner Malwarebytes detects as Bird Miner has been found in a cracked installer for the high-end music production software Ableton Live. The software is used as an instrument for live performances by DJs, as well as a tool for composing, recording, mixing, and mastering. A...

The vulnerability of the EnterpriseDB database management system’s installer allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EnterpriseDB database management system’s installer relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Windows Installer component in Windows operating systems, related to object handling errors in memory, allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the BigSQL installer, a database management system for PostgreSQL, allows a hacker to read arbitrary portions of the server process’ memory.

The vulnerability of the BigSQL installer, a database management system for PostgreSQL, is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary portions of the server’s memory using a specially created INSE...

Qt 5.12.4 Released with support for OpenSSL 1.1.1

Qt 5.12.4, the fourth patch release of Qt 5.12 LTS, is released today. Qt 5.12.4 release provides a number of bug fixes, as well as performance and other improvements. As an important new item it provides binaries build with OpenSSL 1.1.1, including the new TLS 1.3 functionality. Compared to Qt...

CVE-2019-11117

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11117

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

Input validation

Improper permissions in the installer for the ITE Tech Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

Design/Logic Flaw

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

Input validation

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...