7687 matches found
CVE-2019-10211
CVE-2019-10211 affects PostgreSQL Windows installers prior to 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24. Root cause: bundled OpenSSL (libeay32.dll) loads configuration from a hardcoded directory during SSL initialization, enabling a local attacker to execute arbitrary code with the calling process’s pr...
CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory...
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file...
CVE-2019-10210
CVE-2019-10210 affects PostgreSQL Windows installers prior to 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24. The vulnerability arises because the EnterpriseDB Windows installer writes the superuser password to an unprotected temporary file in the installation directory, enabling local attackers to obtain c...
Google Chrome Permission License and Access Control Issues Vulnerability (CNVD-2019-38251)
Google Chrome is a web browser from Google, an American company. A vulnerability exists in Installer in versions prior to Google Chrome 78.0.3904.70 with privilege permission and access control issues. A remote attacker can exploit the vulnerability to elevate privileges...
HPSBHF03633 rev.1 - Intel Rapid Storage Technology (RSTe) Driver Installer Vulnerability
Potential Security Impact Escalation of privilege VULNERABILITY SUMMARY HP has been notified of a security vulnerability with the driver pack installers for IntelR RSTe package versions before version 4.7.0.2083 that may allow an authenticated user to escalate privilege via local access. RESOLUTI...
Google Chrome Security Updates (stable-channel-update-for-desktop_22-2019-10) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2019-13702
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...
openSUSE: Security Advisory for libopenmpt (openSUSE-SU-2019:2319-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-17435
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
CVE-2019-17435
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
Privilege escalation
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
CVE-2019-17435
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
Local Privilege Escalation in GlobalProtect App for Windows
A Local Privilege Escalation vulnerability exists in the GlobalProtect App for Windows auto-update feature that can allow for modification of a GlobalProtect App MSI installer package on disk before installation. Ref GPC-8977, CVE-2019-17435 Successful exploitation of this issue may allow a...
Intel Active System Console Elevation of Privilege Vulnerability
Intel Active System Console is an active system console application from Intel Corporation USA. A security vulnerability exists in the installer in versions prior to Intel Active System Console 8.0 Build 24, which stems from the program not performing sufficient path checking. An attacker could...
PT-2019-4015 · Palo Alto Networks · Globalprotect Agent For Windows
Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent for Windows versions 5.0.3 and earlier GlobalProtect Agent for Windows versions 4.1.12 and earlier Description: A Local Privilege Escalation issue exists in the auto-update feature of the GlobalProtect Agent for Windows,...
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file...
Input validation
Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11167
CVE-2019-11167 affects Intel Smart Connect Technology for Intel NUC. Root cause: improper file permissions in the software installer, enabling an authenticated local user to escalate privileges via local access. According to the Intel advisory, the vendor does not provide patches and recommends u...