Lucene search
+L

7331 matches found

NVD
NVD
added 2023/02/11 1:23 a.m.20 views

CVE-2022-34392

SupportAssist for Home PCs versions 3.11.4 and prior contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information...

5.5CVSS5.3AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/11 1:23 a.m.7 views

CVE-2022-34386

Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

5.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/11 1:23 a.m.8 views

CVE-2022-34388

Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerability to view and modify sensitive information in the database of...

7.1CVSS5.8AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/11 1:23 a.m.10 views

CVE-2022-34385

SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/11 1:23 a.m.24 views

CVE-2022-34385

SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/11 12:00 a.m.14 views

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs, which stems from a rate-limit bypass issu...

5.3CVSS5.7AI score0.00442EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/11 12:00 a.m.9 views

Dell SupportAssist for Home PCs 代码问题漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.11.4 and prior versions, which...

5.5CVSS5.7AI score0.00164EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/11 12:00 a.m.9 views

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.11.4 and prior versions, which...

7.1CVSS7AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/11 12:00 a.m.10 views

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.11.4 and prior versions, which...

7.8CVSS7.3AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/10 8:26 p.m.39 views

CVE-2022-34392

SupportAssist for Home PCs versions 3.11.4 and prior contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information...

5.5CVSS5.6AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/10 8:26 p.m.56 views

CVE-2022-34392

Dell SupportAssist for Home PCs, version 3.11.4 and earlier, has an insufficient session expiration vulnerability. An authenticated non-admin user can obtain a refresh token, reuse the access token, and access sensitive information. Root cause: improper session expiration handling. No remediation...

5.5CVSS5.3AI score0.00164EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/02/10 8:15 p.m.10 views

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

6.5CVSS5.8AI score0.00519EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/10 8:15 p.m.55 views

CVE-2022-34387

CVE-2022-34387 affects Dell SupportAssist for Home PCs (v3.11.4 and earlier) and SupportAssist for Business PCs (v3.2.0 and earlier). The vulnerability is a local privilege escalation: a logged-in attacker could elevate privileges and gain total control of the system. Technical details in connect...

7.8CVSS7.8AI score0.00153EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/02/10 8:07 p.m.63 views

CVE-2022-34385

Dell SupportAssist for Home PCs (versions ≤ 3.11.4) and SupportAssist for Business PCs (versions ≤ 3.2.0) are described as affected by a cryptographic weakness that could allow an authenticated non-admin user to obtain sensitive information. The connected Nessus entry for Dell SupportAssist

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/02/10 7:18 p.m.59 views

CVE-2022-34366

Dell SupportAssist for Home PCs (versions 3.11.2 and prior) contains an Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit this to obtain sensitive information. This CVE (CVE-2022-34366) is supported by multiple repositories documenti...

6.5CVSS6.4AI score0.00519EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/10 12:00 a.m.7 views

PT-2023-13373 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior Description: A privilege escalation issue exists, allowing a local authenticated malicious user to potentially elevate...

7.8CVSS7.8AI score0.00153EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/10 12:00 a.m.9 views

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...

6.5CVSS6.1AI score0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/02/10 12:00 a.m.14 views

PT-2023-13371 · Dell · Dell Supportassist For Home Pcs +1

Name of the Vulnerable Software and Affected Versions: SupportAssist for Home PCs versions 3.11.4 and prior SupportAssist for Business PCs versions 3.2.0 and prior Description: The issue is related to a cryptographic weakness. An authenticated non-admin user could potentially exploit this weaknes...

5.5CVSS5.2AI score0.00128EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/02/10 12:00 a.m.9 views

PT-2023-13367 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.2 and prior Description: The issue is related to an Overly Permissive Cross-domain Whitelist, which could allow an authenticated non-admin user to potentially exploit it and obtain sensitive...

6.5CVSS6.2AI score0.00519EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/08 7:15 p.m.30 views

CVE-2022-45755

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

5.4CVSS5.6AI score0.00447EPSS
SaveExploits1References1
Rows per page
Query Builder