Show filters
36 Total Results
Displaying 31-36 of 36
Sort by:
Attacker Value
Unknown
CVE-2016-7300
Disclosure Date: December 20, 2016 (last updated November 25, 2024)
Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan horse executable file, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability."
0
Attacker Value
Unknown
CVE-2015-7306
Disclosure Date: September 21, 2015 (last updated October 05, 2023)
The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access administration pages" permission.
0
Attacker Value
Unknown
CVE-2015-7307
Disclosure Date: September 21, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the configuration page.
0
Attacker Value
Unknown
CVE-2012-2057
Disclosure Date: September 17, 2012 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.
0
Attacker Value
Unknown
CVE-2010-1307
Disclosure Date: April 08, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
0
Attacker Value
Unknown
CVE-2000-0722
Disclosure Date: October 20, 2000 (last updated February 22, 2025)
Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.
0
