WordPress Multi Plugin Installer Plugin <= 1.1.0 - Local File Traversal

Because of this vulnerability, unauthenticated attackers can read arbitrary files. Solution Update the plugin...

Microsoft Internet Explorer add-on Installer Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape Enhanced Protected Mode on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the InfoSphere Information Server software installer is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information using standard commands...

Fedora 21 : roundcubemail-1.1.2-1.fc21 (2015-11469)

Release 1.1.2 - Add new plugin hook 'identitycreateafter' providing the ID of the inserted identity 1490358 - Add option to place signature at bottom of the quoted text even in top-posting mode sigbelow - Fix handling of %-encoded entities in mailto: URLs 1490346 - Fix zipped messages downloads...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04664)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the Windows Installer service for Microsoft Windows. A local attacker can exploit the vulnerability to gain privileges via custom acti...

Update Java version bundled found in the installer to a version >= 1.8u51

Update the bundled version of java to a version = 1.8u51 1.8 update 51, which fixes many security issues http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html. Included in the security fixes is a fix for logjam CVE-2015-4000...

Microsoft Windows Installer Service Privilege Escalation Vulnerability (3072630)

This host is missing an important security update according to Microsoft Bulletin MS15-074. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2371

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

Code injection

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

CVE-2015-2371

CVE-2015-2371 corresponds to a Windows Installer Service elevation-of-privilege issue. A local attacker can escalate privileges by abusing a custom action script within an MSI package, affecting multiple Windows editions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, W...

CVE-2015-2371

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

(Pwn2Own) Microsoft Windows Installer Local Elevation of Privilege Vulnerability

This vulnerability allows local attackers to execute arbitrary code as SYSTEM on vulnerable installations of Microsoft Windows. An attacker must be logged in as a user on the system in order to execute the attack. The specific flaw exists within the behavior of some MSI installations. Some...

CVE-2015-2371: Undefined Security Weakness

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

MS15-074: Vulnerability in Windows Installer service could allow elevation of privilege: July 14, 2015

None None...

MS15-074: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)

The version of Windows Installer Service installed on the remote Windows host is missing Cumulative Security Update 3072630. It is, therefore, affected by an elevation of privilege vulnerability in the Windows Installer service due to improperly running customized action scripts. A local attacker...

CVE-2015-1901

IBM InfoSphere Information Server installer vulnerability (CVE-2015-1901) affects InfoSphere Information Server 8.5, 8.7, 9.1, and 11.3, with the issue arising during installation where a local user could execute commands and expose sensitive information. The IBM security bulletin lists the remed...

CVE-2015-1901: Exposure of Sensitive Information to an Unauthorized Actor

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands...

IBM InfoSphere Information Server Installer Local Information Disclosure Vulnerability

IBM InfoSphere Information Server is a data integration software platform that helps organizations get more value out of complex, heterogeneous information scattered across systems. A security vulnerability in the IBM InfoSphere Information Server installer during installation allows local users ...