CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408: Undefined Security Weakness

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

PT-2016-5159

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop versions prior to 5.2R2 Pulse Secure Installer Service versions prior to 8.2R2 Description The issue allows restricted users to gain privileges via unspecified vectors. Recommendations For Pulse Secure Desktop versions pri...

CVE-2016-3472

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server...

Code injection

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server...

CVE-2016-3472

CVE-2016-3472 affects Oracle Siebel CRM 8.1.1, 8.2.2, IP2014–IP2016. The Siebel Engineering - Installer and Deployment (Web Server) subcomponent is vulnerable; remote authenticated users over HTTP can impact confidentiality. No exploit details or patches are provided in the connected documents; r...

CVE-2016-3472: Undefined Security Weakness

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server...

PT-2016-5493

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 Description The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it via vectors related to the Web Server in the Siebel...

Oracle Siebel CRM Siebel Engineering - Unspecified Vulnerability in Installer and Deployment Component

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA, which includes modules for sales management, marketing management, customer service system, call center, etc. Siebel Engineering - Installer and Deployment is one of the Siebel Engineering Installer and...

NetMove SaAT Netizen and SaAT Netizen installer arbitrary code execution vulnerability

NetMove SaAT Netizen and SaAT Netizen installer are both products of NetMove Japan. The former is a set of security software and the latter is an installer for SaAT Netizen. An arbitrary code execution vulnerability exists in NetMove SaAT Netizen installer 1.2.0.424 and earlier and SaAT Netizen...

CVE-2016-4831

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-4831

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-4831

Consolidated details from multiple sources show that CVE-2016-4831 affects LINE for Windows and LINE Installer (versions ≤ 4.7.0) due to an insecure DLL search path. The root cause is loading a Trojan horse DLL from an unspecified directory, enabling arbitrary code execution with the privileges o...

PT-2016-6172

Name of the Vulnerable Software and Affected Versions LINE versions 4.7.0 and earlier LINE Installer versions 4.7.0 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability...

CVE-2016-4831: Undefined Security Weakness

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

LINE for Windows may insecurely load Dynamic Link Libraries

Overview LINE for Windows provided by LINE Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

InstantHMI 6.1 - Local Privilege Escalation

InstantHMI 6.1 - Local Privilege Escalation Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, full...

InstantHMI 6.1 - Local Privilege Escalation

Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program...

Hide.Me VPN Client 1.2.4 - Privilege Escalation

Exploit for windows platform in category local exploits Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on:...