CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

Stormshield SSO 日志信息泄露漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. A security vulnerability exists in Stormshield SSO that stems from plaintext user passwords and PSKs being included in the log files of the .exe installer...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-21908 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2022-21908

CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...

Windows Installer Elevation of Privilege Vulnerability

...

Description of the security update for Excel 2016: January 11, 2022 (KB5002114)

None None...

Description of the security update for Office 2013: January 11, 2022 (KB5002064)

Description of the security update for Office 2013: January 11, 2022 KB5002064 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Note: To apply thi...

PT-2022-1567 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. This can be exploited to elevate privileges. An...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected: Windows 10 Version 20...

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

Design/Logic Flaw

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

The vulnerability of the Google Chrome web app installer allows a hacker to manipulate the URL input by using a specially created HTML page.

The vulnerability of the Google Chrome WebApp installer is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to manipulate the URL input using a specially created HTML page...

CVE-2021-30360

The CVE-2021-30360 entry describes a local, privilege-escalation risk tied to Windows Installer repairs. An attacker with local access can trigger a repair process and place a crafted executable in the repair folder, which then runs with the privileges of the Check Point Remote Access Client. CVS...