4139 matches found
CAD Quick Look - Editing Assistant pc client software has a command execution vulnerability
Quanta Technology Co., Ltd. is a listed software company, based on the field of construction engineering, centering on the whole life cycle of engineering projects, providing professional applications in the field of construction engineering as the core basic support, and value-added services suc...
rkprivat.sk Cross Site Scripting vulnerability OBB-1408618
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
Authorization
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626: Missing Authorization
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
korealeadercctv.co.kr Cross Site Scripting vulnerability OBB-1390971
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Input validation
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12302
The Intel Driver & Support Assistant is affected by CVE-2020-12302. Description: improper permissions may allow an authenticated user to potentially escalate privileges via local access on versions before 20.7.26.7. Affected product: Intel® Driver & Support Assistant prior to 20.7.26.7. Reported ...
CVE-2020-12302: Incorrect Permission Assignment for Critical Resource
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
boote24.de Cross Site Scripting vulnerability OBB-1340816
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lets-chat-kerberos (>=0.2.0, <=0.4.1), passport-assistant-kerberos (0.0.1) +1 more potentially affected by CVE-2016-1000238 via node-krb5 (0.0.6)
node-krb5 NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-krb5 and may be impacted: - lets-chat-kerberos =0.2.0, =0.4.1 - passport-assistant-kerberos 0.0.1 - passport-kerberos 0.0.1 Source cves: CVE-2016-1000238 Source advisory:...
crosleyrepros.com Cross Site Scripting vulnerability OBB-1273669
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
An Alexa Bug Could Have Exposed Your Voice History to Hackers
Amazon has patched the flaw, but its discovery underscores the importance of locking down your voice assistant interactions...
kolczykowo.pl Cross Site Scripting vulnerability OBB-1244779
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...