HP Support Assistant 安全漏洞

HP Support Assistant is a solution from Hewlett-Packard HP USA that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant, which stems from a potential security hole that could be exploited by an attacker to cause privilege escalation,...

CVE-2022-23455

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

CVE-2022-23455

The CVE-2022-23455 entry concerns HP Support Assistant. Reported vulnerabilities include privilege escalation, integrity compromise, allowing communication with untrusted clients, and unauthorized modification of files. No exploit details are provided. Remediation guidance from the associated HP ...

CVE-2022-23453

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

CVE-2022-23453

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

CVE-2022-23453

CVE-2022-23453 affects HP Support Assistant. The HP advisory HPSBGN03762 documents multiple vulnerabilities in HP Support Assistant, including privilege escalation, integrity compromise, communication with untrusted clients, and unauthorized modification of files. The CVSS 3.1 metrics indicate a ...

PT-2023-12719

Name of the Vulnerable Software and Affected Versions HP Support Assistant affected versions not specified Description The issue involves potential security vulnerabilities in HP Support Assistant, including privilege escalation, compromise of integrity, allowed communication with untrusted...

CVE-2022-23455: Improper Privilege Management

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

CVE-2022-23454: Incorrect Default Permissions

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

PT-2023-12720 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: The issue involves potential security vulnerabilities in HP Support Assistant, including privilege escalation, compromise of integrity, allowed communication with untrusted...

The vulnerability of Vim text editors, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service failures...

Vulnerability of SNC_io parser<EW>::read_sedge() and seh->snext() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: The function readsedge in the NefS2/SNCio parser component relies on the snext function from the CGAL algorithm library. This vulnerability is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the Grub configuration file, related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Grub configuration file is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vulnerability of the PM_io parser function: <PMDEC>::read_face() and store_iv() in the Nef_2/PM_io parser component. This is part of the CGAL computational geometry algorithm library. It allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMioparser.h component of the computational geometry library CGAL is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of Containerd’s execution environment, related to the improper assignment of permissions to critical resources, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Containerd execution environment is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Code injection

SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application...

CVE-2022-42270

NVIDIA distributions of Linux contain a vulnerability in nvdlaemutasksubmit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service...

CVE-2022-42269

NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity. The scope of the impact can extend to other components...

CVE-2022-42269

CVE-2022-42269 affects NVIDIA Trusted OS via an SMC call handler where untrusted input is not validated, allowing a highly privileged local attacker to disclose information and compromise integrity. The issue is documented across multiple sources, with NVIDIA’s security bulletin indicating affect...

NVIDIA Jetson 输入验证错误漏洞

NVIDIA Jetson is an embedded system development module from NVIDIA Corporation. A security vulnerability exists in NVIDIA Jetson that stems from an inability to validate untrusted input in the SMC call handler could allow a highly privileged local attacker to cause an information disclosure and...