7394 matches found
CVE-2015-5644
The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...
CVE-2015-5643
The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...
Cisco AnyConnect Secure Mobility Client Elevation of Privilege Vulnerability (CNVD-2015-06520)
Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients from Cisco. The client enables remote users to securely connect to the Cisco ASA 5500 device via SSL VPN. An elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client 4.1on OS X Linux that...
CVE-2015-5644
CVE-2015-5644 affects ICZ MATCHA SNS prior to 1.3.7. The installer fails to correctly configure the database, enabling a code injection path that allows a remote attacker to execute arbitrary PHP code. The vulnerability is tied to installer-time database configuration (CWE-94) and culminates in c...
CVE-2015-5643
The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...
CVE-2015-5644
The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...
RPC function call failed. Function name: [GetSvcVersion]
Challenge Veeam Backup & Replication fails to communicate with the Veeam Installer Service service on a managed remote machine with the error: Error: The RPC server is unavailable. RPC function call failed. Function name: GetSvcVersion. Target machine: remotemachine.domain.tld:6160. This article ...
Advertising software use the Apple OS X system vulnerabilities to steal data-vulnerability warning-the black bar safety net
! Malwarebytes security researchers found an advertisement software installation program is accessing MAC OS X's password management system Keychain to. In July, researchers have identified the Mac OS X operating system of a local elevation of Privilege（LPF）vulnerabilities. Experts have found tha...
WordPress Multi Plugin Installer Plugin <= 1.1.0 - Local File Traversal
Because of this vulnerability, unauthenticated attackers can read arbitrary files. Solution Update the plugin...
Microsoft Internet Explorer add-on Installer Sandbox Escape Vulnerability
This vulnerability allows remote attackers to escape Enhanced Protected Mode on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2015-4674
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...
CVE-2015-4674
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...
The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to gain access to protected information
The vulnerability of the InfoSphere Information Server software installer is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information using standard commands...
Fedora 21 : roundcubemail-1.1.2-1.fc21 (2015-11469)
Release 1.1.2 - Add new plugin hook 'identitycreateafter' providing the ID of the inserted identity 1490358 - Add option to place signature at bottom of the quoted text even in top-posting mode sigbelow - Fix handling of %-encoded entities in mailto: URLs 1490346 - Fix zipped messages downloads...
Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04664)
Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the Windows Installer service for Microsoft Windows. A local attacker can exploit the vulnerability to gain privileges via custom acti...
Update Java version bundled found in the installer to a version >= 1.8u51
Update the bundled version of java to a version = 1.8u51 1.8 update 51, which fixes many security issues http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html. Included in the security fixes is a fix for logjam CVE-2015-4000...
Microsoft Windows Installer Service Privilege Escalation Vulnerability (3072630)
This host is missing an important security update according to Microsoft Bulletin MS15-074. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2015-2371
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...
Code injection
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...
CVE-2015-2371
CVE-2015-2371 corresponds to a Windows Installer Service elevation-of-privilege issue. A local attacker can escalate privileges by abusing a custom action script within an MSI package, affecting multiple Windows editions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, W...