7663 matches found
PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers
Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...
coreos-installer bug fix and enhancement update
An update is available for coreos-installer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Researchers Detail New Malware Campaign Targeting Indian Government Employees
The Transparent Tribe threat actor has been linked to a new campaign aimed at Indian government organizations with trojanized versions of a two-factor authentication solution called Kavach. "This group abuses Google advertisements for the purpose of malvertising to distribute backdoored versions ...
The vulnerability of the installation file of the Kaspersky Endpoint Security antivirus software and the Kavremover utility allows a malicious actor to execute an external executable file from within the installation process.
The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious actor to execute an external executable file from within the installation process...
The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility allows a malicious actor to execute the executable file instead of the uninstaller.
The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious individual to execute the executable file instead of the uninstaller, which is...
The vulnerability arises from the implementation of the `msiexec.exe /fa c:\windows\installer[XXXXX].msi` command, which is used by the Windows Installer installer for the Juniper Identity Management Service. This allows a malicious individual to escalate their privileges.
The vulnerability of the msiexec.exe /fa c:\windows\installer\XXXXX.msi command for installing the Windows Installer’s Juniper Identity Management Service lies in the creation of temporary files with insecure permissions in the %TEMP% directory. Exploiting this vulnerability can allow an attacker...
ASB-A-243924784
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-27784
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
CVE-2021-27784
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
Design/Logic Flaw
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
Vulnerability of the Installer component: The general installer for MySQL allows a perpetrator to gain access to read, modify, add, or delete data, or to trigger a crash.
Vulnerability of the Installer component: The MySQL Installer component is vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain access to read, modify, add, or delete data, or cause the installation process to terminate abnormally...
PT-2022-9869 · Hcl · Hcl Launch Container
Name of the Vulnerable Software and Affected Versions: HCL Launch Container images affected versions not specified Description: The issue concerns non-unique HTTPS certificates and a database encryption key in the provided HCL Launch Container images. A fix is available, which includes directions...
Unknown Actors are Deploying RomCom RAT to Target Ukrainian Military
The threat actor behind a remote access trojan called RomCom RAT has been observed targeting Ukrainian military institutions as part of a new spear-phishing campaign that commenced on October 21, 2022. The development marks a shift in the attacker's modus operandi, which has been previously...
CVE-2022-41796
Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2022-41796
Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2022-41796
Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2022-41796
Untrusted search path vulnerability in the installer of Content Transfer for Windows Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...