7583 matches found
CVE-2025-46430
Dell Display and Peripheral Manager (affected: versions prior to 2.1.2.12) contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low-privilege, local attacker could potentially exploit this to achieve Elevation of Privileges. Remediation exists in version 2.1.2.12 or...
Dell Display and Peripheral Manager 安全漏洞
Dell Display and Peripheral Manager is a peripheral management software from Dell USA. A security vulnerability exists in Dell Display and Peripheral Manager versions prior to 2.1.2.12, which stems from an unwanted privileged execution of the installer, which could result in elevated privileges...
PT-2025-46169
Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager versions prior to 2.1.2.12 Description Dell Display and Peripheral Manager contains an Execution with Unnecessary Privileges issue in the Installer. A local attacker with low privileges could potentially...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11213
Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
Autodesk Installer 安全漏洞
Autodesk Installer is an installer for software from the US company Autodesk. A security vulnerability exists in Autodesk Installer that stems from insufficient validation when loading binaries, which could result in elevation of privileges to NT AUTHORITY/SYSTEM...
PT-2025-45152
Name of the Vulnerable Software and Affected Versions GOG Galaxy version 2.0.0.2 Description GOG Galaxy version 2.0.0.2 is susceptible to a missing SSL certificate validation issue. An attacker with control over the local network, DNS, or a proxy can conduct a man-in-the-middle MitM attack. This...
VulnCheck KEV: CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
CVE-2025-23358
NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...
CVE-2025-23358
NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...
CVE-2025-23358
NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...
CVE-2025-23358
CVE-2025-23358 affects NVIDIA NVApp for Windows. The vulnerability is a flaw in the NVIDIA NVApp installer that can manipulate a search path element, potentially enabling code execution and privilege escalation on a local attacker’s host. Multiple connected sources confirm the issue and its impac...
PT-2025-45037
Name of the Vulnerable Software and Affected Versions NVIDIA NVApp for Windows affected versions not specified Description NVIDIA NVApp for Windows has a flaw in its installer that allows a local attacker to manipulate search path elements. Exploitation could result in code execution and privileg...
NVIDIA NVApp 代码问题漏洞
NVIDIA NVApp is a graphics card control center from NVIDIA Corporation. A code issue vulnerability exists in NVIDIA NVApp that stems from a search path element issue in the installer that could lead to code execution and elevation of privilege...
[SECURITY] Fedora 42 Update: uv-0.9.5-1.fc42
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
Vulnerabilities fixed in Rockwell Automation FactoryTalk
Rockwell Automation has fixed vulnerabilities in FactoryTalk View Machine Edition. The vulnerabilities include an authentication bypass that allows unauthorized access to the PanelView Plus 7 Series B file system and diagnostic information. In addition, there is a path-traversal vulnerability tha...
Moderate: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.9.1
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.9.1 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.9.1 release that simplify the process of...
Moderate: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.9.1
Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.9.1 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.9.1 release that simplify the process of...
CVE-2025-62776
The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...