PT-2023-24692 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Description: The issue is related to improper input validation in the installer, which may allow an authenticated user to potentially enable an escalation of privilege via local access. Recommendation...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit this vulnerability to disclose sensitive...

Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23014)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23014 advisory. - Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow an authenticated user t...

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

Security researchers have warned about an "easily exploitable" flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. "A threat actor could impersonate a popular publisher and issue a...

Kingsoft Installer of WPS Office 操作系统命令注入漏洞

Kingsoft Installer of WPS Office is an installation and setup program for WPS Office from Kingsoft, a Chinese company. A security vulnerability exists in Kingsoft Installer of WPS Office version 10.8.0.6186. An attacker can exploit the vulnerability to execute arbitrary operating system commands...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0124-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0124-1 advisory. - Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via...

CVE-2019-16283

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2019-16283

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2019-16283

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2019-16283

CVE-2019-16283 concerns the HP SoftPaq Installer vulnerability. The issue affects the HP SoftPaq installer component, allowing arbitrary code execution via a vulnerable installer prior to a fixed version. CVSS metrics (local access, low user interaction, high impact) align with a local, low-effor...

CVE-2019-16283

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

PT-2023-11343 · Hewlett Packard · Hp Softpaq Installer

Name of the Vulnerable Software and Affected Versions: HP Softpaq installer affected versions not specified Description: A potential security issue has been identified that can lead to arbitrary code execution. Recommendations: At the moment, there is no information about a newer version that...

Veeam Agent for Microsoft Windows Update Fails with "The digital signature of the downloaded update file is invalid"

Challenge The integrated Veeam Agent for Microsoft Windows Update check displays the error: The digital signature of the downloaded update file is invalid. Most likely, it got corrupted. Please, download the update again. An alternate message is a warning stating: Version is available but cannot ...

June 6, 2023, update for Visio 2013 (KB5002343)

June 6, 2023, update for Visio 2013 KB5002343 This article describes update 5002343 for Microsoft Visio 2013 that was released on June 6, 2023.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't apply to the...

Chromium: CVE-2023-2939 Insufficient data validation in Installer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...

The vulnerability of the software for configuring Schneider Electric Easergy Builder allows a hacker to execute arbitrary code.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to an uncontrolled element in the search process of the installer. Exploiting this vulnerability could allow a perpetrator to perform arbitrary actions during the installation process...

Google Chrome Installer Component Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Installer component, which can be exploited by attackers to bypass security restrictions...

DEBIAN-CVE-2023-2939

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...