https://vulnogram.org/ Most recent CVEs assigned by Flexera Software LLC (flexera). https://vulnogram.org/seaview/icons/flexera.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-4869 https://vulnogram.org/CVE-2026-4869 A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Pre… Medium Tue, 13 Oct 2026 14:10:11 GMT https://vulnogram.org/CVE-2026-19572 https://vulnogram.org/CVE-2026-19572 A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without pr… Critical Network Exploitable Wed, 07 Oct 2026 04:04:19 GMT https://vulnogram.org/CVE-2026-4027 https://vulnogram.org/CVE-2026-4027 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control. High Fri, 19 Jun 2026 13:15:39 GMT https://vulnogram.org/CVE-2026-4026 https://vulnogram.org/CVE-2026-4026 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their privileges to Administrator level. High Fri, 19 Jun 2026 12:59:51 GMT https://vulnogram.org/CVE-2025-12418 https://vulnogram.org/CVE-2025-12418 Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior. When e.g., a local administrator performs an uninstall, a symlink may get followed on removal of a user writeable conf… Medium Fri, 07 Nov 2025 21:27:04 GMT https://vulnogram.org/CVE-2024-14012 https://vulnogram.org/CVE-2024-14012 Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a p… High Wed, 29 Oct 2025 15:30:53 GMT https://vulnogram.org/CVE-2024-7562 https://vulnogram.org/CVE-2024-7562 A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021… High Thu, 12 Jun 2025 16:05:31 GMT https://vulnogram.org/CVE-2021-41528 https://vulnogram.org/CVE-2021-41528 An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to access the import / export functionality with low privileges. Medium Fri, 07 Feb 2025 19:54:05 GMT https://vulnogram.org/CVE-2021-41527 https://vulnogram.org/CVE-2021-41527 An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA setup hasn’t been completed. Low Fri, 07 Feb 2025 19:44:43 GMT https://vulnogram.org/CVE-2023-29080 https://vulnogram.org/CVE-2023-29080 Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during i… High Thu, 30 Jan 2025 17:41:55 GMT https://vulnogram.org/CVE-2024-2658 https://vulnogram.org/CVE-2024-2658 A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially… High Thu, 30 Jan 2025 17:11:22 GMT https://vulnogram.org/CVE-2023-29081 https://vulnogram.org/CVE-2023-29081 A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, tempor… Medium Fri, 26 Jan 2024 20:02:50 GMT https://vulnogram.org/CVE-2021-41526 https://vulnogram.org/CVE-2021-41526 A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action. Wed, 29 Mar 2023 00:00:00 GMT https://vulnogram.org/CVE-2019-8963 https://vulnogram.org/CVE-2019-8963 A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool. High Network Exploitable Wed, 29 Mar 2023 00:00:00 GMT https://vulnogram.org/CVE-2017-6894 https://vulnogram.org/CVE-2017-6894 A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with… High Wed, 29 Mar 2023 00:00:00 GMT https://vulnogram.org/CVE-2021-41525 https://vulnogram.org/CVE-2021-41525 An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior. Tue, 21 Sep 2021 14:35:10 GMT https://vulnogram.org/CVE-2020-12083 https://vulnogram.org/CVE-2020-12083 An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). Fri, 17 Sep 2021 17:45:15 GMT https://vulnogram.org/CVE-2020-12082 https://vulnogram.org/CVE-2020-12082 A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). Fri, 17 Sep 2021 17:45:14 GMT https://vulnogram.org/CVE-2020-12080 https://vulnogram.org/CVE-2020-12080 A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash. Fri, 17 Sep 2021 17:45:12 GMT https://vulnogram.org/CVE-2020-12081 https://vulnogram.org/CVE-2020-12081 An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system. Fri, 31 Jul 2020 16:55:11 GMT https://vulnogram.org/CVE-2019-8961 https://vulnogram.org/CVE-2019-8961 A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function calls itself recursively given a certain condition in the received message, an unauthenti… Tue, 21 Apr 2020 14:20:52 GMT https://vulnogram.org/CVE-2019-8960 https://vulnogram.org/CVE-2019-8960 A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certain message, call itself again and then wait for a f… Tue, 21 Apr 2020 14:20:52 GMT https://vulnogram.org/CVE-2013-3494 https://vulnogram.org/CVE-2013-3494 A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a malicious user execute arbitrary code. Wed, 12 Feb 2020 15:14:19 GMT https://vulnogram.org/CVE-2013-3942 https://vulnogram.org/CVE-2013-3942 Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability Tue, 11 Feb 2020 17:37:49 GMT https://vulnogram.org/CVE-2013-3489 https://vulnogram.org/CVE-2013-3489 Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file Fri, 31 Jan 2020 17:46:51 GMT https://vulnogram.org/CVE-2013-3488 https://vulnogram.org/CVE-2013-3488 Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file. Fri, 31 Jan 2020 17:46:47 GMT https://vulnogram.org/CVE-2013-0739 https://vulnogram.org/CVE-2013-0739 Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script. Thu, 30 Jan 2020 13:38:03 GMT https://vulnogram.org/CVE-2013-0738 https://vulnogram.org/CVE-2013-0738 Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php. Thu, 30 Jan 2020 13:34:50 GMT https://vulnogram.org/CVE-2013-0725 https://vulnogram.org/CVE-2013-0725 ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities Thu, 30 Jan 2020 13:03:59 GMT https://vulnogram.org/CVE-2013-3486 https://vulnogram.org/CVE-2013-3486 IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability Mon, 27 Jan 2020 14:28:50 GMT https://vulnogram.org/CVE-2013-3493 https://vulnogram.org/CVE-2013-3493 XnView 2.03 has an integer overflow vulnerability Mon, 27 Jan 2020 14:26:46 GMT https://vulnogram.org/CVE-2013-3492 https://vulnogram.org/CVE-2013-3492 XnView 2.03 has a stack-based buffer overflow vulnerability Mon, 27 Jan 2020 14:24:40 GMT https://vulnogram.org/CVE-2012-4919 https://vulnogram.org/CVE-2012-4919 Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability Wed, 22 Jan 2020 18:03:01 GMT https://vulnogram.org/CVE-2013-0737 https://vulnogram.org/CVE-2013-0737 Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter. Thu, 02 Jan 2020 20:13:58 GMT https://vulnogram.org/CVE-2013-3246 https://vulnogram.org/CVE-2013-3246 Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file. Thu, 02 Jan 2020 19:38:44 GMT https://vulnogram.org/CVE-2013-3247 https://vulnogram.org/CVE-2013-3247 Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file. Thu, 02 Jan 2020 19:38:36 GMT https://vulnogram.org/CVE-2013-3932 https://vulnogram.org/CVE-2013-3932 SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to admi… Thu, 02 Jan 2020 19:26:30 GMT https://vulnogram.org/CVE-2013-3931 https://vulnogram.org/CVE-2013-3931 Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the property_name parameter, re… Thu, 02 Jan 2020 19:26:27 GMT https://vulnogram.org/CVE-2013-3937 https://vulnogram.org/CVE-2013-3937 Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Thu, 02 Jan 2020 19:11:47 GMT https://vulnogram.org/CVE-2013-3939 https://vulnogram.org/CVE-2013-3939 xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extensio… Thu, 02 Jan 2020 19:11:43 GMT https://vulnogram.org/CVE-2013-3941 https://vulnogram.org/CVE-2013-3941 Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads… Thu, 02 Jan 2020 19:11:40 GMT https://vulnogram.org/CVE-2013-3944 https://vulnogram.org/CVE-2013-3944 Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag. Thu, 02 Jan 2020 18:43:09 GMT https://vulnogram.org/CVE-2013-3945 https://vulnogram.org/CVE-2013-3945 The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag. Thu, 02 Jan 2020 18:43:05 GMT https://vulnogram.org/CVE-2013-3946 https://vulnogram.org/CVE-2013-3946 Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header. Thu, 02 Jan 2020 18:43:01 GMT https://vulnogram.org/CVE-2013-3935 https://vulnogram.org/CVE-2013-3935 Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vector… Thu, 02 Jan 2020 14:31:52 GMT https://vulnogram.org/CVE-2013-3936 https://vulnogram.org/CVE-2013-3936 Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML. Thu, 02 Jan 2020 14:31:49 GMT https://vulnogram.org/CVE-2019-8956 https://vulnogram.org/CVE-2019-8956 In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory. Mon, 01 Apr 2019 18:39:32 GMT https://vulnogram.org/CVE-2018-20034 https://vulnogram.org/CVE-2018-20034 A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, c… Thu, 21 Mar 2019 20:54:28 GMT https://vulnogram.org/CVE-2018-20032 https://vulnogram.org/CVE-2018-20032 A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing t… Thu, 21 Mar 2019 20:52:17 GMT https://vulnogram.org/CVE-2018-20031 https://vulnogram.org/CVE-2018-20031 A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, c… Thu, 21 Mar 2019 20:47:53 GMT