https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:54:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-96189 EUVD-2026-96189 https://cve.radiocsirt.org/vuln/euvd-2026-96189 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9267 <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-9267 https://cve.radiocsirt.org/vuln/ghsa-q9w8-9j2h-5cw2 <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> https://cve.radiocsirt.org/vuln/ghsa-q9w8-9j2h-5cw2 https://cve.radiocsirt.org/vuln/gsd-2015-9267 gsd-2015-9267 https://cve.radiocsirt.org/vuln/gsd-2015-9267 https://cve.radiocsirt.org/vuln/jvndb-2021-000018 <p>The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides (CWE-427, CVE-2015-9267, and CVE-2015-9268). BlackWingCat of PinkFlyingWhale reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides (CWE-427, CVE-2015-9267, and CVE-2015-9268). BlackWingCat of PinkFlyingWhale reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000018 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-9267 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nsis</p> <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nsis</p> <p>Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-9267