CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

Input validation

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-5922

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5922

The CVE-2019-5922 issue affects the installer of Microsoft Teams, where an unsafe DLL search path (App Dir DLL planting) could allow arbitrary code to run with the caller’s privileges. Affected product: the Teams installer (prior to version 1.3.00.362). Root cause: insecure loading of Dynamic Lin...

Pirate matryoshka

The use of torrent trackers to spread malware is a well-known practice; cybercriminals disguise it as popular software, computer games, media files, and other sought-after content. We detected one such campaign early this year, when The Pirate Bay TPB tracker filled up with harmful files used to...

March 5, 2019, update for Office 2016 (KB4032231)

None None...

Intel OpenVINO for Linux Installer Information Disclosure Vulnerability

Intel OpenVINO for Linux is an open visual inference and neural network optimization toolkit for Linux-based platforms from Intel USA. A security vulnerability exists in the installer in IntelR OpenVINOTM 2018 R3 and earlier versions for Linux-based platforms, which stems from a logic error in th...

Intel USB 3.0 eXtensible Host Controller Driver Local Code Injection Vulnerability

Intel USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 is a USB Universal Serial Bus 3.0 eXtensible Host Controller Driver for the Windows 7 platform from Intel Corporation. Host Controller Driver for Microsoft Windows 7. A code injection vulnerability exists in the installer in...

The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially crafted file...

Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

GHSA-87G3-X896-W798 Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

GHSA-G93H-75M9-3QQ4 pngcrush-installer downloads Resources over HTTP

Affected versions of pngcrush-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

pngcrush-installer downloads Resources over HTTP

Affected versions of pngcrush-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

GHSA-GC6C-5V9W-XMHW Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

GHSA-5RM3-QHXF-RH3R Downloads Resources over HTTP in co-cli-installer

Affected versions of co-cli-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

Downloads Resources over HTTP in co-cli-installer

Affected versions of co-cli-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

Code injection

Code injection vulnerability in the installer for IntelR USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access...