Lucene search
+L

7667 matches found

NVD
NVD
added 2022/06/10 1:15 p.m.24 views

CVE-2022-27502

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...

7.8CVSS0.0066EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/10 1:15 p.m.18 views

Privilege escalation

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...

7.2CVSS7.8AI score0.0066EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/10 12:03 p.m.37 views

CVE-2022-27502

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...

8AI score0.0066EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/09 11:15 p.m.5 views

CVE-2017-20018

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely...

7.8CVSS4.8AI score0.00626EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/09 12:00 a.m.13 views

XAMPP 代码问题漏洞

XAMPP is an integrated installation package for apache, PHP, Perl and MySQL from the US-based Apache Friends team. The product is primarily used for building web servers. A security vulnerability exists in XAMPP 7.1.1-0-VC14, which stems from an unknown feature of the component installer. An...

7.8CVSS7.3AI score0.00626EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
added 2022/06/07 12:00 a.m.8 views

June 7, 2022, update for Office 2016 (KB5002182)

None None...

6.1AI score
SaveExploits0
NVD
NVD
added 2022/06/06 11:15 p.m.47 views

CVE-2022-27438

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

8.1CVSS0.0196EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2022/06/06 11:15 p.m.5 views

CVE-2022-27438

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

8.1CVSS6.5AI score0.0196EPSS
SaveExploits2References5
Prion
Prion
added 2022/06/06 11:15 p.m.25 views

Remote code execution

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

5.1CVSS8.3AI score0.0196EPSS
SaveExploits2References4Affected Software69
Cvelist
Cvelist
added 2022/06/06 10:21 p.m.58 views

CVE-2022-27438

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

8.6AI score0.0196EPSS
SaveExploits2References2
EUVD
EUVD
added 2022/06/06 10:21 p.m.13 views

EUVD-2022-31941

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

8.1CVSS8.3AI score0.0196EPSS
SaveExploits2References4
OSV
OSV
added 2022/06/06 10:21 p.m.7 views

CVE-2022-27438

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

6.3AI score
SaveExploits0References4
CVE
CVE
added 2022/06/06 10:21 p.m.138 views

CVE-2022-27438

CVE-2022-27438 affects Caphyon Advanced Installer 19.3 and earlier and products using the Advanced Updater. The root cause is a remote code execution vulnerability in the update check function via the CustomDetection parameter. Exploitation requires starting an affected installation to trigger th...

8.1CVSS8.3AI score0.0196EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2022/06/06 12:00 a.m.11 views

Caphyon Ltd Advanced Installer 安全漏洞

Caphyon Ltd Advanced Installer is a powerful and easy-to-use Windows installer authoring tool from Caphyon Romania. It is used to install, update and configure products safely and securely. A security vulnerability exists in Caphyon Ltd Advanced Installer version 19.2, which stems from a Remote...

8.1CVSS7.8AI score0.0196EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2022/06/04 12:00 a.m.7 views

PT-2022-4866 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: IntelliJ IDEA versions prior to 2022.2.2 Description: The issue is related to an uncontrolled search path element in the executable files of the IntelliJ IDEA integrated development environment installer. Exploitation of this issue may allow ...

7.8CVSS7.8AI score0.00258EPSS
SaveExploits0References4
NVD
NVD
added 2022/06/02 2:15 p.m.26 views

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

7.8CVSS0.0022EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/02 2:15 p.m.9 views

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

7.8CVSS5.8AI score0.0022EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-31500

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

7.8CVSS5.3AI score0.0022EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.11 views

Knime Analytics Platform 安全漏洞

Knime Analytics Platform is a free and open source data analysis, reporting and integration platform from Knime, Switzerland. A security vulnerability previously existed in Knime Analytics Platform version 4.6.0, which stemmed from the Windows installer setting the wrong file system permissions...

7.8CVSS7.4AI score0.0022EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/01 4:15 p.m.29 views

CVE-2021-27914

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

7.6CVSS0.00458EPSS
SaveExploits0References1
Rows per page
Query Builder