Input validation

Insufficient input validation in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11114

Insufficient input validation in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11114

Intel® Driver & Support Assistant (DSA) prior to version 19.4.18 is affected by CVE-2019-11114 due to insufficient input validation, enabling a local-privilege user to potentially cause a denial of service. The issue affects DSA v19.3.12.3 and earlier. Intel’s advisory recommends updating to 19.4...

CVE-2019-11095

CVE-2019-11095 concerns Intel® Driver & Support Assistant (DSA) versions 19.3.12.3 and earlier, with an insufficient access control flaw that may allow a privileged local user to disclose information. The connected sources corroborate the issue as a local-privilege information disclosure vulnerab...

CVE-2019-11095: Undefined Security Weakness

Insufficient access control in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11114: Improper Input Validation

Insufficient input validation in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access...

PT-2019-2371

Name of the Vulnerable Software and Affected Versions Intel Driver & Support Assistant versions 19.3.12.3 and earlier Description The issue is caused by insufficient input validation, which may allow a privileged user to potentially enable denial of service via local access. This could result in ...

PT-2019-2360

Name of the Vulnerable Software and Affected Versions Intel Driver & Support Assistant version 19.3.12.3 and before Description The issue is related to insufficient access control, which may allow a privileged user to enable information disclosure via local access. This could potentially lead to...

Intel® Driver & Support Assistant Advisory

Summary: A potential security vulnerability in Intel® Driver & Support Assistant may allow denial of service or information of disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11114 Description: Insufficient input...

Shimo VPN elevation of privilege vulnerability (CNVD-2019-22623)

Shimo VPN is a VPN virtual private network software for macOS platforms An elevation of privilege vulnerability vulnerability exists in the 'configureRoutingWithCommand' function of the Assistant service in Shimo VPN version 4.1.5.1. The vulnerability stems from a network system or product that...

Shimo VPN Denial of Service Vulnerability

Shimo VPN is a VPN Virtual Private Network software based on macOS platform. A denial of service vulnerability exists in the deleteConfig function of the Assistant service in Shimo VPN version 4.1.5.1. The vulnerability stems from a network system or product that does not properly validate incomi...

Shimo VPN Elevation of Privilege Vulnerability

Shimo VPN is a VPN Virtual Private Network software based on macOS platform. An elevation of privilege vulnerability exists in the writeConfig function of the Assistant service in Shimo VPN version 4.1.5.1. The vulnerability stems from a network system or product that does not properly validate...

Mac OS X Feedback Assistant Race Condition

This module exploits a race condition vulnerability in Mac's Feedback Assistant. A successful attempt would result in remote code execution under the context of root. Module Options msf use exploit/osx/local/feedback/assistantroot msf undefinedassistantroot show actions ...actions... msf...

How To Make Your Amazon Echo and Google Home as Private as Possible

With news that Amazon lets human employees listen to Alexa recordings, you might want to tighten up your smart assistant ship...

Security Bulletin: Multiple vulnerabilities in Node.js and OpenSSL affect IBM Watson Assistant on IBM Cloud Private

Summary Multiple vulnerabilities in Node.js™ and OpenSSL as used by Node.js that affect IBM® Watson™ Assistant on IBM Cloud Private were disclosed by the Node.js foundation and OpenSSL project. Vulnerability Details CVEID: CVE-2018-12122 DESCRIPTION: Node.js is vulnerable to a denial of service,...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Watson Assistant on IBM Cloud Private

Summary There are multiple vulnerabilities in the IBM® Runtime Environment Java™ Technology Edition, Version 8, used by IBM Watson™ Assistant for IBM Cloud Private. The issues were disclosed as part of the IBM Java SDK updates for October 2018. Vulnerability Details CVEID: CVE-2018-3139...

HP Support Assistant < 8.7.50.3 DLL Loading Vulnerability

The version of HP Support Assistant installed on the remote Windows host is prior to 8.7.50.3. It is, therefore, affected by an unspecified DLL loading vulnerability. This can allow a local attacker to load and execute arbitrary code. C Tenable Network Security, Inc. include'compat.inc'; if...

HP Support Assistant Authorization Issues Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.7.50.3. A local attacker could exploit the vulnerability to execute...

Unspecified Vulnerability in Apple iOS and Apple macOS Mojave Feedback Assistant

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. feedback Assistant is one of the Feedback Assistant is one of the system error feedback components. An...

GOG Galaxy Input Validation Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. An input validation vulnerability exists in the Privileged Assistant tool in version 1.2.47 of GOG Galaxy for macOS-based platforms. An attacker can exploit the vulnerability by sending a PID to obtain...