CVE-2014-4835

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...

PT-2015-3782

Name of the Vulnerable Software and Affected Versions IBM ServerGuide versions prior to 9.63 UpdateXpress System Packs Installer UXSPI versions prior to 9.63 ToolsCenter Suite versions prior to 9.63 Description The issue allows local users to obtain sensitive information by reading a file, as...

CVE-2014-4835: Exposure of Sensitive Information to an Unauthorized Actor

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...

Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman foreman-proxy katello-agent pulp pulp-nodes pulp-puppet pulp-rpm ruby193-rubygem-fog ruby193-rubygem-foreman-tasks packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is a system...

FirePassword - Firefox Username & Password Recovery Tool

FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...

Instant PDF Password Protector - Password Protect PDF file

Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...

Type confusion

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

CVE-2013-2604

CVE-2013-2604 affects RealNetworks GameHouse RealArcade Installer (ActiveMARK Game Installer) 2.6.0.481 and 3.0.7. The weakness is permissions in the GameHouse Games directory tree that allow local users to place a Trojan horse DLL (e.g., DDRAW.DLL) in an individual game’s directory, enabling pri...

PT-2015-3546

Name of the Vulnerable Software and Affected Versions RealArcade Installer version 2.6.0.481 Description The issue concerns the RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll, which performs unexpected type conversions for invalid parameter types. This allows remote attackers to...

PT-2015-3547

Name of the Vulnerable Software and Affected Versions RealNetworks GameHouse RealArcade Installer versions 2.6.0.481 through 3.0.7 Description The issue concerns weak permissions set for the GameHouse Games directory tree, allowing local users to gain privileges. This can be achieved by placing a...

CVE-2013-2603: Undefined Security Weakness

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

CVE-2013-2604: Undefined Security Weakness

RealNetworks GameHouse RealArcade Installer aka ActiveMARK Game Installer 2.6.0.481 and 3.0.7 uses weak permissions Create Files/Write Data for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated...

CVE-2014-9141

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...

CVE-2014-9141

CVE-2014-9141 affects Thomson Reuters Fixed Assets CS 13.1.4 and earlier. The installer exposes weak permissions on connectbgdl.exe, enabling a local user to modify the program and achieve arbitrary code execution. The vulnerability scope is local, with no user interaction required stated in the ...

CVE-2014-9141: Undefined Security Weakness

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...

PYSEC-2014-11

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

CVE-2014-4812

The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port...

PT-2014-6132

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Source versions 8.x through 9.0.1 Description The issue concerns an open network port for a debug service in the installer, which can be exploited by remote attackers to obtain sensitive information by connecting to this...

Privilege escalation

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...

CVE-2014-4073

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...