7663 matches found
Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
PT-2023-7109 · Cisco · Cisco Appdynamics Php Agent
Name of the Vulnerable Software and Affected Versions: Cisco AppDynamics PHP Agent affected versions not specified Description: The issue is related to incorrect permission assignment in the installer script of the Cisco AppDynamics PHP Agent. This could allow an authenticated, local attacker to...
SanDisk Security Installer Security Vulnerability
Western Digital SanDisk Security Installer is a security installer from Western Digital. A security vulnerability exists in SanDisk Security Installer that stems from the presence of multiple DLL search order hijacking vulnerabilities that could allow an attacker with local access rights to execu...
CVE-2023-34997
Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-34997
Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-33874
Uncontrolled search path in some IntelR NUC 12 Pro Kits & Mini PCs - NUC12WS IntelR HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-28377
Improper authentication in some IntelR NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-25075
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-25075
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-20568
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution...
CVE-2023-20567
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution...
CVE-2022-33898
Insecure inherited permissions in some IntelR NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
Code injection
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-34997
Affected software: Intel Server Configuration Utility (before version 16.0.9). Vulnerability: insecure inherited permissions in the installer, allowing an authenticated user with local access to potentially escalate privileges. Impact: privilege escalation with high impact on confidentiality, int...
CVE-2023-25075
CVE-2023-25075 describes an unquoted search path in the installer of Intel® Server Configuration Utility software pre-16.0.9, which may allow an authenticated local user to escalate privileges. Affected product: Intel Server Configuration Utility installer (before 16.0.9). Remediation: update to ...
CVE-2023-36705
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-36705
Windows Installer Elevation of Privilege Vulnerability...
