3306 matches found
Oracle OSS Support Tools Diagnostic Assistant XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle OSS Support Tools. Authentication is required to exploit this vulnerability. The specific flaw exists within the Diagnostic Assistant component. Due to the improper restriction of XML...
Oracle Support Tools 代码问题漏洞
Oracle Support Tools is a set of Oracle support tools from Oracle Corporation USA. OSS Support Tools Diagnostic Assistant Prior to 2.12.41 A code issue vulnerability exists that allows highly privileged attackers to compromise OSS Support Tools via HTTP network access. This could result in...
VulnCheck KEV: CVE-2020-11732
The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...
Microsoft Windows Update Assistant Improper Access Control Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Update...
The vulnerability of the Windows Update Assistant software, a system for working with Windows updates, is related to deficiencies in access control. This vulnerability allows an attacker to escalate their privileges.
The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
HPSBGN03722 rev. 1 - HP Support Assistant Weak ACL and DLL Loading Vulnerability
Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Rémi ESCOURROU @remiescourrou VULNERABILITY SUMMARY A weak ACL may potentially allow an unauthorized person to load arbitrary code. RESOLUTION A patch was released on March 10,...
The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a shared resource, allowing an attacker to cause a service failure.
The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failure...
CVE-2021-27070
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-27070
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
Privilege escalation
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-27070
CVE-2021-27070 is the Windows 10 Update Assistant Elevation of Privilege vulnerability. Connected sources confirm it affects the Windows Update Assistant component and was addressed by Microsoft in KB5000802 (March 9, 2021) which lists CVE-2021-27070 among fixed issues. The CVSS information in th...
CVE-2021-27070 Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
PT-2021-2277 · Microsoft · Windows 10 Update Assistant +1
Name of the Vulnerable Software and Affected Versions: Windows 10 Update Assistant affected versions not specified Description: The issue is related to improper access control in the Windows Update Assistant, which can be exploited to elevate privileges. This could allow an attacker to affect the...
Microsoft Windows Update Assistant 安全漏洞
Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Update Assistant. The following products and editions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based...
Improper Authentication
Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...
IBM Engineering Requirements Quality Assistant Cross-Site Scripting Vulnerability (CNVD-2021-14752)
IBM Engineering Requirements Quality Assistant is a Watson AI based software from IBM USA used to assist developers in improving the quality of engineering requirements. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker can exploit the...
CVE-2021-25341
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider...