7661 matches found
Microsoft .NET Framework DoS And RCE Vulnerabilities (KB5022729)
This host is missing an important security update according to Microsoft KB5022729 Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Security Bulletin: A vulnerability (CVE-2021-35603) in Java SE affects IBM CICS TX Standard
Summary Java SE is used by IBM CICS TX Standard to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The fix removes vulnerability CVE-2021-35603 that allows an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact...
Security Bulletin: Multiple vulnerabilities in Java SE affect IBM CICS TX Advanced
Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The following CVEs are applicable: Denial of service CVEs - CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21294,...
CVE-2023-21800
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-21800
Windows Installer Elevation of Privilege Vulnerability...
Privilege escalation
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-21800 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2023-21800 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2023-21800
CVE-2023-21800 is a Windows Installer Elevation of Privilege vulnerability. Affected component: Windows Installer. Root cause: elevation of privilege in local context (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8, HIGH). Exploitation status not shown in provided docs. Impact conc...
End of support for Office 2016 and Office 2019
None None...
Windows Installer Elevation of Privilege Vulnerability
...
SA40007 - 2014-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Secure Desktop client: User privilege escalation issue in Installer Service (CVE-2014-3811)
Last Modified Date Aug 24, 2026 12:35:24 AM...
JVN#60263237: The installers of ELECOM Camera Assistant and QuickFileDealer may insecurely load Dynamic Link Libraries
The installers of ELECOM Camera Assistant and QuickFileDealer provided by ELECOM CO.,LTD. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privileges of the running application. Solution...
PT-2023-5951 · Git · Git For Windows
Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.39.2 Description: The issue is related to the Windows port of the revision control system Git. By carefully crafting a DLL and placing it into a subdirectory of a specific name next to the Git for Windows...
PT-2023-1601 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Installer. Exploitation of this issue may allow an attacker to elevate their privileges. An...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server...
MAL-2023-2073 Malicious code in pyinstalelr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 608a985f9a4d7715c603f56385287cce93d42422957e7e451e7ab89e1e2c6451 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
CVE-2023-23698
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete...
多款Dell产品 安全漏洞
Dell Command Update is a Dell USA Inc. tool for automating driver, BIOS and firmware updates in Dell products. A security vulnerability exists in Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.6.0 and 4.7.1, which originates from the inclusion of an insecure action i...