CVE-2016-7060: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in Red Hat QuickStart Cloud Installer QCI 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display...

PT-2017-9082

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI version 1.0 Description The issue concerns the web interface of the affected software, where password fields are not masked. This allows physically proximate attackers to obtain sensitive password...

CVE-2017-2675

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

Privilege escalation

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

CVE-2017-2675

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

CVE-2017-2675

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

CVE-2017-2675

Little Snitch 3.0–3.7.3 contains a local privilege escalation in the installer related to writing the configuration file at.obdev.littlesnitchd.plist to /Library/LaunchDaemons. The CVSSv3 context indicates LOCAL attack with HIGH impact to confidentiality, integrity, and availability, and LOW priv...

CVE-2017-2675: Undefined Security Weakness

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons...

[20170704] - Core - Installer: Lack of Ownership Verification

The CMS installer application lacked a process to verify the users ownership of a webspace, potentially allowing users to gain control...

PT-2017-15468

Name of the Vulnerable Software and Affected Versions Little Snitch versions 3.0 through 3.7.3 Description The issue is related to a local privilege escalation in the installer part, specifically concerning the installation of the configuration file at.obdev.littlesnitchd.plist to...

CVE-2017-7444

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed...

CVE-2017-7444

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed...

Design/Logic Flaw

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed...

CVE-2017-7444

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed...

CVE-2017-7444: Undefined Security Weakness

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed...

PT-2017-17741

Name of the Vulnerable Software and Affected Versions Veritas System Recovery versions prior to 16 SP1 Description The issue is related to a DLL hijacking vulnerability in the patch installer. This vulnerability can be exploited if an attacker has write access to the directory from which the...

April 4, 2017, update for Office 2016 (KB3178666)

None None...

CVE-2016-9472

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narr...

CVE-2016-9472

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narr...

Cross site scripting

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narr...