Lucene search
+L

7398 matches found

exploitpack
exploitpack
added 2019/05/23 12:0 a.m.28 views

Microsoft Windows 10 (17763.379) - Install DLL

Microsoft Windows 10 17763.379 - Install DLL edit: Figure out how this works for yourself. I can't be bothered. It's a really hard race, doubt anyone will be able to repro anyway. Could be used with malware, you could programmatically trigger the rollback. Maybe you can even pass the silent flag ...

SaveExploits0
Exploit DB
Exploit DB
added 2019/05/23 12:0 a.m.205 views

Microsoft Windows 10 (17763.379) - Install DLL

edit: Figure out how this works for yourself. I can't be bothered. It's a really hard race, doubt anyone will be able to repro anyway. Could be used with malware, you could programmatically trigger the rollback. Maybe you can even pass the silent flag to hide installer UI and find another way to...

5.3AI score
SaveExploits0
Prion
Prion
added 2019/05/17 9:29 p.m.20 views

Code injection

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...

6.8CVSS7.7AI score0.01349EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2019/05/17 8:5 p.m.66 views

CVE-2019-11644

The CVE-2019-11644 entry describes a local privilege escalation in the Windows installers for F-Secure products (SAFE for Windows before 17.6; Internet Security before 17.6; Anti-Virus before 17.6; Client Security Standard/Premium before 14.10; PSB Workstation Security before 12.01; Computer Prot...

7.8CVSS7.6AI score0.01349EPSS
SaveExploits0References1Affected Software5
OSV
OSV
added 2019/05/17 4:29 p.m.4 views

CVE-2019-5957

Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.8CVSS7.1AI score0.00944EPSS
SaveExploits0References2
NVD
NVD
added 2019/05/17 4:29 p.m.19 views

CVE-2019-5957

Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.8CVSS7.8AI score0.00944EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/17 4:29 p.m.7 views

CVE-2019-5931

Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors...

8.7CVSS7.3AI score0.01163EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/17 4:29 p.m.5 views

CVE-2019-11093

Unquoted service path in the installer for the IntelR SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
added 2019/05/17 4:29 p.m.21 views

CVE-2019-11093

Unquoted service path in the installer for the IntelR SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
added 2019/05/17 4:29 p.m.22 views

CVE-2019-5931

Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors...

8.7CVSS8.3AI score0.01163EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/17 4:29 p.m.3 views

CVE-2019-0171

Improper directory permissions in the installer for IntelR QuartusR software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00319EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/17 4:29 p.m.2 views

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00519EPSS
SaveExploits0References2
NVD
NVD
added 2019/05/17 4:29 p.m.14 views

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

7.8CVSS7.9AI score0.00519EPSS
SaveExploits0References2
Prion
Prion
added 2019/05/17 4:29 p.m.17 views

Code injection

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

7.2CVSS7.9AI score0.00519EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/05/17 4:29 p.m.4 views

CVE-2018-3701

Improper directory permissions in the installer for IntelR PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00336EPSS
SaveExploits0References4
Prion
Prion
added 2019/05/17 4:29 p.m.21 views

Input validation

Improper directory permissions in the installer for IntelR PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS7.7AI score0.00336EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2019/05/17 4:29 p.m.16 views

Privilege escalation

Unquoted service path in the installer for the IntelR SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS6.7AI score0.00357EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/05/17 3:41 p.m.139 views

CVE-2019-0091

CVE-2019-0091 is a code-injection vulnerability in the installer component of Intel CSME (CSME) and TXE, allowing a locally logged-in unprivileged user to escalate privileges. Affected: Intel CSME before 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel TXE 3.1.65, 4.0.15. Exploitation context is lo...

7.8CVSS7.9AI score0.00519EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/05/17 3:41 p.m.23 views

CVE-2019-0091

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

7.9AI score0.00519EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/17 3:41 p.m.78 views

CVE-2019-0171

Intel Quartus installers are affected by CVE-2019-0171 due to improper directory permissions that could allow an authenticated user to escalate privileges via local access. Affected products include Intel® Quartus® Prime all versions 15.1–18.1 and Intel® Quartus® II 9.1–15.0. The underlying issue...

7.8CVSS7.7AI score0.00319EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder