HP Support Assistant < 8.7.50.3 DLL Loading Vulnerability

The version of HP Support Assistant installed on the remote Windows host is prior to 8.7.50.3. It is, therefore, affected by an unspecified DLL loading vulnerability. This can allow a local attacker to load and execute arbitrary code. C Tenable Network Security, Inc. include'compat.inc'; if...

HP Support Assistant Authorization Issues Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.7.50.3. A local attacker could exploit the vulnerability to execute...

Unspecified Vulnerability in Apple iOS and Apple macOS Mojave Feedback Assistant

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. feedback Assistant is one of the Feedback Assistant is one of the system error feedback components. An...

GOG Galaxy Input Validation Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. An input validation vulnerability exists in the Privileged Assistant tool in version 1.2.47 of GOG Galaxy for macOS-based platforms. An attacker can exploit the vulnerability by sending a PID to obtain...

GOG Galaxy Input Validation Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. An input validation vulnerability exists in the Privileged Assistant tool in version 1.2.47 of GOG Galaxy for macOS-based platforms. An attacker can use this vulnerability to globally create directories...

CVE-2018-5927

HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...

Code injection

HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...

CVE-2018-5927

HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...

CVE-2018-5927

HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...

CVE-2018-5927

CVE-2018-5927 affects HP Support Assistant prior to version 8.7.50.3. The HP advisory (C06242762) documents an arbitrary code execution risk via a DLL loading vulnerability exploitable by a local attacker with access to the host; the impact is local code execution with high impact on confidential...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-002)

The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - A malicious application may be able to execute arbitrary code with kernel privileges. CVE-2019-8555 - A malicious application may be able to determine...

macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-002)

The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - An application may be able to execute arbitrary code with kernel privileges. CVE-2019-8529 - A local user may be able to read kernel memory. CVE-2019-8504 ...

Apple iOS 12.2 Patches 51 Serious Flaws

Apple patched 51 vulnerabilities rated serious with its iOS 12.2 update. One of the most serious bugs could allow apps to secretly listen to end users. Apple’s iOS security updates, announced Monday during its March product announcement event, are for the iPhone 5s and later, iPad Air and later a...

Pixar Renderman Input Validation Vulnerability (CNVD-2019-42872)

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Assistant tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate privileges to...

Pixar Renderman Elevation of Privilege Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. A local elevation of privilege vulnerability exists in the Installation Assistant tool in version 22.3.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate...

Android TV exposed the bug or cause of the user's private photos leaked-vulnerability warning-the black bar safety net

Recently, Twitter users prashanth broke the news, said he found the Android TV's a bug, or lead to users private photos being leaked. When he connected to a Vu Android TV, and select the“switch to another account”, turned out to be able to view all with this TV the name of the person and the...

Multiple IBM Products Arbitrary File Download Vulnerability

IBM SAN Volume Controller and others are products of IBM.BM SAN Volume Controller SVC simplifies storage infrastructure management, tiered storage, and advanced replication capabilities for storage systems. A security vulnerability exists in Service Assistant in several IBM products. An attacker...

HPSBGN03605 rev.1 - HP Support Assistant DLL Loading Vulnerability

Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported By: Marius Gabriel Mihai VULNERABILITY SUMMARY The vulnerability allows an unauthorized person to load arbitrary code. RESOLUTION Version 8.7.50.3 was released on December 11, 2018...

schoolofrock.com XSS vulnerability

Open Bug Bounty ID: OBB-714895 Description| Value ---|--- Affected Website:| schoolofrock.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

i4 assistant cross-site scripting vulnerability

i4 assistant is a specialized management tool for Apple mobile devices from China for Aipu Information Technology Company. A cross-site scripting vulnerability exists in i4 assistant version 7.85. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via th...