EUVD-2021-22917

Malware in sbrugna...

EUVD-2021-8790

Malicious code in bioql PyPI...

EUVD-2022-33503

Malicious code in bioql PyPI...

EUVD-2022-33504

Malicious code in bioql PyPI...

Dell SupportAssist Client 安全漏洞

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist Client that stems from a software fix component that contains a symbolic link...

CVE-2022-34384

Dell SupportAssist Client Consumer version 3.11.1 and prior, SupportAssist Client Commercial version 3.2 and prior, Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local...

CVE-2022-34384: Execution with Unnecessary Privileges

Dell SupportAssist Client Consumer version 3.11.1 and prior, SupportAssist Client Commercial version 3.2 and prior, Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local...

Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial arbitrary file deletion/overwrite vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial are vulnerable to an arbitrary file deletion/overwrite...

Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial Code Issue Vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. The Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial code issue vulnerability could be exploited by an attacker...

CVE-2022-29094

Dell SupportAssist Client (Consumer 3.10.4 and earlier; Commercial 3.1.1 and earlier) contains an arbitrary file deletion/overwrite vulnerability. An authenticated non‑admin user can delete or overwrite arbitrary files on the system. The issue is documented as CVE-2022-29094; CVSS data in the pro...

CVE-2022-29092: Uncontrolled Search Path Element

Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...

CVE-2022-29095: Improper Neutralization of Input During Web Page Generation

Dell SupportAssist Client Consumer versions 3.10.4 and prior and Dell SupportAssist Client Commercial versions 3.1.1 and prior contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to...

Dell SupportAssist Client 代码问题漏洞

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. The Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial code issue vulnerability could be exploited by an attacker...

CVE-2022-29093: Improper Limitation of a Pathname to a Restricted Directory

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system...

PT-2022-19409

Name of the Vulnerable Software and Affected Versions Dell SupportAssist Client Consumer versions 3.11.0 and earlier Dell SupportAssist Client Commercial versions 3.2.0 and earlier Description A privilege escalation issue exists, allowing a non-admin user to gain admin access to the system. This...

CVE-2022-29094: Improper Limitation of a Pathname to a Restricted Directory

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issue and delete or overwrite arbitrary files...

Dell SupportAssist Client Consumer Arbitrary File Deletion Vulnerability

Dell SupportAssist Client is a client application from Dell of America DELL. The program provides automated, proactive and predictive techniques for troubleshooting, etc. An arbitrary file deletion vulnerability exists in Dell SupportAssist Client Consumer 3.9.13.0 and prior versions. An attacker...

CVE-2021-36297

SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing...

CVE-2021-36297

Summary: CVE-2021-36297 affects Dell SupportAssist Client to 3.9 via an untrusted search path vulnerability that enables loading an arbitrary DLL through DLL planting/hijacking. The exploit requires a separate administrative action and is not part of the default SOSInstallerTool.exe installation....

CVE-2021-36297

SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing...