3306 matches found
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Input validation
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12302
The Intel Driver & Support Assistant is affected by CVE-2020-12302. Description: improper permissions may allow an authenticated user to potentially escalate privileges via local access on versions before 20.7.26.7. Affected product: Intel® Driver & Support Assistant prior to 20.7.26.7. Reported ...
abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +233 more potentially affected by CVE-2020-15195 via tensorflow (>=1.0.1 <=1.15.3)
tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.4.2, =0.1.1, =0.1.5 - autobazaar =0.1.0 - autogan =0.0.5 - automationobjectdetection-sandeepjena7 =0.0.1 - automl-lib =0.0.1 and more Source cves: CVE-2020-15195 Source advisory: OSV:GHSA-63XM-RX5P-XVQR...
boote24.de Cross Site Scripting vulnerability OBB-1340816
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lets-chat-kerberos (>=0.2.0 <=0.4.1), passport-assistant-kerberos (=0.0.1) +1 more potentially affected by CVE-2016-1000238 via node-krb5 (=0.0.6)
node-krb5 NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-krb5 and may be impacted: - lets-chat-kerberos =0.2.0, =0.4.1 - passport-assistant-kerberos =0.0.1 - passport-kerberos =0.0.1 Source cves: CVE-2016-1000238 Source advisor...
crosleyrepros.com Cross Site Scripting vulnerability OBB-1273669
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
An Alexa Bug Could Have Exposed Your Voice History to Hackers
Amazon has patched the flaw, but its discovery underscores the importance of locking down your voice assistant interactions...
kolczykowo.pl Cross Site Scripting vulnerability OBB-1244779
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-11474
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...
CVE-2020-11474
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...
Code injection
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...
CVE-2020-11474
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...
CVE-2020-11474
CVE-2020-11474 affects NCP Secure Enterprise Client prior to 10.15 r47589. Description: a symbolic link attack on enumusb.reg via Support Assistant. The records indicate local access threat with low attack complexity and no user interaction required, with potential partial confidentiality, integr...
About the security content of iOS 12.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
A New Gadget Stops Voice Assistants From Snooping on You
Meet LeakyPick, the low-cost audio spy detector for your Amazon Alexa, Google Home, and other network-connected devices...
arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6440533038989312 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6190000009ac...
chanpenpakhaoma.tarad.com Cross Site Scripting vulnerability OBB-1215249
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Windows cleaning assistant input validation error vulnerability (CNVD-2020-51417)
Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaner and Disk Cleaner. An input validation error vulnerability...
Windows cleaning assistant input validation error vulnerability
Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaning and Disk Cleanup. An input validation error vulnerability...