Lucene search
+L

7664 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/07/15 12:00 a.m.43 views

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.3CVSS6AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/15 12:00 a.m.116 views

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS6.2AI score0.00315EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/15 12:00 a.m.39 views

ABB Automation Builder Platform Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ABB Automation Builder Platform. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS6.2AI score0.00315EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/15 12:00 a.m.46 views

Samsung USB Driver Windows Installer for Mobile Phones Input Validation Error Vulnerability

Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...

2.1CVSS3AI score0.00142EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.14 views

The vulnerability of the Git version control system installer allows a hacker to execute arbitrary code.

The vulnerability of the Git distributed version control system installer is related to the use of an unreliable search path. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

8.2CVSS7.6AI score0.00394EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/07/14 4:15 p.m.23 views

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

7.8CVSS0.00301EPSS
SaveExploits1References2
CVE
CVE
added 2022/07/14 3:03 p.m.78 views

CVE-2021-45492

CVE-2021-45492 affects Sage 300 ERP (through 6.8.x). The installer places C:\Sage\Sage300\Runtime at the front of the system PATH, and this directory is writable by unprivileged users due to weak C:\ permissions inherited by the installer. Because PATH entries are used for DLL search order, an at...

7.8CVSS7.9AI score0.00301EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/14 3:03 p.m.29 views

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

8.2AI score0.00301EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2022/07/13 12:00 a.m.64 views

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10057-1 Rating: important References: Cross-References: CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2294 Affected Products: openSUSE Leap 15.3:NonFree openSUSE Leap 15.4:NonFree An update th...

9.3CVSS7.3AI score0.70461EPSS
SaveExploits0
NVD
NVD
added 2022/07/12 9:15 p.m.35 views

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

8.2CVSS0.00394EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2022/07/12 9:15 p.m.112 views

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

8.2CVSS4AI score0.00394EPSS
SaveExploits0
Prion
Prion
added 2022/07/12 9:15 p.m.28 views

Design/Logic Flaw

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

4.4CVSS7.2AI score0.00394EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/07/12 8:35 p.m.90 views

CVE-2022-31012

Git for Windows (a Windows-specific patch set of Git) contains a vulnerability tracked as CVE-2022-31012 where the installer can mistakenly execute a binary placed at C:\mingw64\bin\git.exe during a fresh install (not during upgrades). A fix was released in version 2.37.1. Workarounds include cre...

8.2CVSS7.4AI score0.00394EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/07/12 8:35 p.m.7 views

CVE-2022-31012 Git for Windows' installer can be tricked into executing an untrusted binary

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

8.2CVSS8.2AI score0.00394EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/12 8:35 p.m.27 views

CVE-2022-31012 Git for Windows' installer can be tricked into executing an untrusted binary

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

8.2CVSS8.3AI score
SaveExploits0References4
OSV
OSV
added 2022/07/12 2:15 p.m.8 views

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

5.5CVSS5.9AI score0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.5 views

CVE-2022-33709

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

7.8CVSS5.8AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/12 2:15 p.m.9 views

CVE-2022-33708

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

7.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.11 views

SAMSUNG USB Driver 安全漏洞

Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.37 views

Git for Windows 代码问题漏洞

Git for Windows is the Git groups' Git for Windows. A code issue vulnerability exists in versions prior to Git for Windows v2.37.1, which stems from the possibility that the installer can be tricked into executing untrusted binaries...

8.2CVSS8.1AI score0.00394EPSS
SaveExploits0References3
Rows per page
Query Builder