CVE-2025-7035: Improper Neutralization of Input During Web Page Generation

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mlatagcloud and mlatermlist shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

PT-2025-29717 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin for WordPress versions up to and including 3.26 Description: The Media Library Assistant plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s mla tag cloud and mla term list...

CVE-2025-43019

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

HP Support Assistant < 9.46.17.0 Privilege Escalation (CVE-2025-43019)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.46.17.0. It is, therefore, affected by a privilege escalation vulnerability: - A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate...

Software Fix (Rescue and Smart Assistant) DLL Hijack Vulnerability - Lenovo Support US

No description provided...

CVE-2025-43019

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

CVE-2025-43019

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

CVE-2025-43019

HP Support Assistant is affected by CVE-2025-43019, a local privilege-escalation vulnerability arising from arbitrary file deletion. Connected sources confirm the issue and relate it to the HP Support Assistant product lines, with HP’s advisory HPSBGN04031 noting affected versions and a minimum m...

CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

CVE-2025-43019: Improper Privilege Management

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...

The vulnerability of the Out of Office Assistant system, related to insufficient protection of the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Out of Office Assistant task distribution system is related to insufficient protection of the web page structure when processing the Jira fullName parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2025-28484

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A potential security issue has been identified, allowing a local attacker to escalate privileges via an arbitrary file deletion. Recommendations: At the moment, there is no...

HP Support Assistant 安全漏洞

HP Support Assistant is a solution from Hewlett-Packard HP USA that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant that originates from a local attacker being able to elevate privileges via arbitrary file deletion...

HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. HP has identified affected versions and the minimum version that mitigates the potential vulnerability. See the affected product...

CVE-2025-45938

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

CVE-2025-45938

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

CVE-2025-45938

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

CVE-2025-45938

The Akeles Out of Office Assistant for Jira version 4.0.1 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The flaw specifically resides in the processing of the Jira fullName parameter , which allows a remote attacker to execute ...

CVE-2025-45938: Improper Neutralization of Input During Web Page Generation

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...