Lucene search
+L

49 matches found

NVD
NVD
•added 2023/07/03 8:15 p.m.•28 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.2AI score0.00884EPSS
SaveExploits0References10
OSV
OSV
•added 2023/07/03 8:15 p.m.•12 views

UBUNTU-CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.8AI score0.00884EPSS
SaveExploits0References11
Prion
Prion
•added 2023/07/03 8:15 p.m.•24 views

Directory traversal

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5CVSS5.2AI score0.00884EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/03 12:00 a.m.•18 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

7.2AI score0.00884EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•22 views

Nullsoft Scriptable Install System 安全漏洞

Nullsoft Scriptable Install System is a professional open source system for creating Windows installers. A security vulnerability exists in Nullsoft Scriptable Install System NSIS versions prior to 3.09, which stems from improper handling of access control to the uninstaller directory...

5.3CVSS5.5AI score0.00884EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•14 views

PT-2023-4535

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 3.09 Description The issue is related to insufficient access control in the Nullsoft Scriptable Install System, which can be exploited by a remote attacker to elevate their privileges...

5.3CVSS6.1AI score0.00884EPSS
SaveExploits0References30
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•8 views

CVE-2023-37378: Undefined Security Weakness

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS6AI score0.00884EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/07/03 12:00 a.m.•86 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.3AI score0.00884EPSS
SaveExploits0
Mend
Mend
•added 2023/07/03 12:00 a.m.•3 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

6.9CVSS0.00884EPSS
SaveExploits0References15
OSV
OSV
•added 2018/10/01 8:29 a.m.•21 views

DEBIAN-CVE-2015-9267

Nullsoft Scriptable Install System NSIS before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program...

5.5CVSS6.5AI score0.00386EPSS
SaveExploits1References1
Prion
Prion
•added 2018/10/01 8:29 a.m.•27 views

Design/Logic Flaw

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

9.3CVSS6.9AI score0.01538EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2018/10/01 8:29 a.m.•17 views

CVE-2015-9267

Nullsoft Scriptable Install System NSIS before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program...

5.5CVSS7.4AI score
SaveExploits0References7
NVD
NVD
•added 2018/10/01 8:29 a.m.•32 views

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

9.3CVSS7.6AI score0.01538EPSS
SaveExploits1References3
OSV
OSV
•added 2018/10/01 8:29 a.m.•8 views

DEBIAN-CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

7.8CVSS7.4AI score0.01538EPSS
SaveExploits1References1
OSV
OSV
•added 2018/10/01 8:29 a.m.•16 views

UBUNTU-CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

7.8CVSS7.1AI score0.01538EPSS
SaveExploits1References3
Mend
Mend
•added 2018/10/01 8:00 a.m.•9 views

CVE-2015-9267

Nullsoft Scriptable Install System NSIS before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program...

6.8CVSS0.00386EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2018/10/01 8:00 a.m.•44 views

CVE-2015-9267

Nullsoft Scriptable Install System NSIS before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program...

6.1AI score0.00386EPSS
SaveExploits1References3
Mend
Mend
•added 2018/10/01 8:00 a.m.•5 views

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

9.3CVSS0.01538EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/01 12:00 a.m.•5 views

CVE-2015-9268: Improper Input Validation

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

9.3CVSS7.2AI score0.01538EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/10/01 12:00 a.m.•2 views

PT-2018-4576

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 2.49 Description The issue allows unprivileged local users to overwrite files due to the use of temporary folder locations. This can lead to a local attack where a plugin or the...

9.3CVSS0.01538EPSS
SaveExploits2References17
Rows per page
Query Builder