7686 matches found
CVE-2021-1727 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2021-1727
CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...
The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras allows a perpetrator to gain enhanced privileges.
The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras is related to errors in the use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2021-20198
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...
CVE-2021-20198
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...
Design/Logic Flaw
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...
CVE-2021-20198
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...
CVE-2021-20198
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this...
CVE-2021-20198
OpenShift CVE-2021-20198 affects the OpenShift Installer during OpenShift Container Platform 4 cluster installation: bootstrap nodes are provisioned with anonymous authentication on kubelet port 10250, allowing unauthenticated /exec requests to run commands in containers. This is addressed in Red...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which allows a hacker to enhance their privileges.
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which operates on non-volatile memory, is related to improper handling of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the installer of microprogramming software for the onboard video driver of the Server Board affects Windows systems. This vulnerability allows a hacker to exploit their privileges.
The vulnerability of the installer of microprogramming software for the onboard video driver of the Server Board occurs due to incorrect handling of the search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2020-36233
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...
Design/Logic Flaw
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...
CVE-2020-36233
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...
CVE-2020-8765
Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8701
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-24451
Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-24451
Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...