The installer of MARKET SPEED may insecurely load Dynamic Link Libraries

Overview The installer of MARKET SPEED provided by Rakuten Securities, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Takashi Sugawara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#78422300: The installer of MARKET SPEED may insecurely load Dynamic Link Libraries

The installer of MARKET SPEED provided by Rakuten Securities, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

Input validation

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...

Input validation

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3697

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...

Input validation

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3697

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access...

CVE-2018-3698

CVE-2018-3698 concerns Intel® Ready Mode Technology. The vulnerability stems from improper file permissions in the installer, which could allow an unprivileged local user to escalate privileges. Affected product: Intel Ready Mode Technology (all versions per advisory). Underlying cause: insecure ...

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3635

The CVE-2018-3635 issue affects Intel Rapid Store Technology (RST) installer. Root cause: insufficient input validation in the installer, enabling an unprivileged user to potentially escalate privileges or trigger an installer denial of service via local access. Affected products are Intel RST be...

Description of the security update for Office 2016: November 13, 2018

None None...

Windows 10 Fall Creators Update Modify module for Security Measures tool installer code execution vulnerability

Windows 10 Fall Creators Update Modify module for Security Measures tool is a Windows 10 Fall Creators security tool. installer is its installer. A code execution vulnerability exists in the installer in the Windows 10 Fall Creators Update Modify module for Security Measures tool, which can be...

Intel® Rapid Store Technology Installer Advisory

Summary: A potential security vulnerability in Intel® Rapid Store Technology RST installer may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service. Intel is releasing Intel® RST installer updates to mitigate this potential vulnerability...

(RHSA-2018:3505) Critical: Red Hat Ansible Tower 3.3.1-2 Release - Container Image

Red Hat Ansible Tower 3.3.1 is now available and contains the following bug fixes: - Fixed event callback error when in-line vaulted variables are used with includevars - Fixed HSTS and X-Frame-Options to properly be set in nginx configuration - Fixed isolated node setup to no longer fail when...

Joomla! 3.0.x < 3.8.8 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...

Joomla! 1.5.x < 3.8.8 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...

Joomla! 3.1.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

Joomla! 2.5.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...