Nullsoft Scriptable Install System Security Vulnerabilities and Issues — Nullsoft Scriptable Install System CVE List

Lucene search

NullsoftNullsoft Scriptable Install System

2 matches found

CVE•added 2018/10/01 8:29 a.m.•45 views

CVE-2015-9267

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

5.5CVSS6AI score0.00044EPSS

CVE•added 2023/07/03 8:15 p.m.•37 views

CVE-2023-37378

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

5.3CVSS5.1AI score0.00393EPSS