Description of the security update for Office 2010: December 8, 2020

Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply this securi...

Security Bulletin: OSS security Scan issues for Concerto installer.

Summary Fixed in IBM Netezza for Cloud Pak for Data 11.1.1.0 Vulnerability Details CVEID: CVE-2018-19838 DESCRIPTION: LibSass is vulnerable to a denial of service, caused by a stack-based buffer overflow in the IMPLEMENTASTOPERATORS expansion in ast.cpp. By persuading a victim to open a...

Design/Logic Flaw

Kirby is a CMS. In Kirby CMS getkirby/cms before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that don't have an admin account for the Pane...

CVE-2020-5798

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions...

CVE-2020-5798

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions...

Druva inSync Client Security Vulnerability

Druva inSync Client is a lightweight application from Druva USA that supports managing data backups and allows collaboration with other users. A security vulnerability exists in the inSync Client installer, which stems from incorrect integrity checking and directory permissions, and which the...

CVE-2020-28950

The installer of Kaspersky Anti-Ransomware Tool KART prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process...

Code injection

The installer of Kaspersky Anti-Ransomware Tool KART prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process...

CVE-2020-28950

The CVE relates to Kaspersky Anti-Ransomware Tool (KART) installer prior to 4.0 Patch C, where a DLL hijacking flaw could allow local privilege escalation during installation. Affected product: KART (pre-4.0 Patch C). Root cause: DLL hijacking in the installer. Impact: privilege elevation during ...

CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

The vulnerability of the software installer for collecting and analyzing data on the performance, power consumption, and temperature of various Intel Data Center Manager Console devices allows a hacker to exploit their privileges.

The vulnerability of the software installer for collecting and analyzing data on the performance, power consumption, and temperature of various Intel Data Center Manager Console devices is related to errors in saving permissions. Exploiting this vulnerability can allow attackers to increase their...

PT-2020-15554 · Jenkins · Jenkins Plugin Installation Manager Tool +1

Name of the Vulnerable Software and Affected Versions: Jenkins Plugin Installation Manager Tool versions 2.1.3 and earlier Description: The issue is related to the Jenkins Plugin Installation Manager Tool not verifying plugin downloads, which may allow third parties to provide crafted plugin...

December 1, 2020, update for Project 2016 (KB4486749)

None None...

The vulnerability of the installer for collecting metrics and traces of Intel Advisor tools allows a perpetrator to enhance their privileges.

The vulnerability of the tool for collecting metrics and traces of Intel Advisor tools is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel HID event filter driver installer allows a hacker to increase their privileges.

The vulnerability of the Intel HID event filter driver installer is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Installer component in Intel Dynamic Application Loader (DAL) software allows a hacker to enhance their privileges.

The vulnerability of the Installer component in Intel Dynamic Application Loader DAL software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-5674

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Security update for rmt-server (important)

openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2020:2000-1 Rating: important References: 1172177 1172182 1172184 1172186 1173351 Cross-References: CVE-2019-16770 CVE-2019-5418 CVE-2019-5419 CVE-2019-5420 CVE-2020-11076 CVE-2020-11077 CVE-2020-15169...

The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries

Overview The installers of multiple products by SEIKO EPSON CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated wi...

SEIKO EPSON CORPORATION Multiple Products Code Issue Vulnerability

SEIKO EPSON CORPORATION A code issue vulnerability exists in various products, which can be exploited by an attacker to execute arbitrary code using the privileges of the user who invoked the installer...