4349 matches found
GOG Galaxy Input Validation Vulnerability
GOG Galaxy is a game client program. The program is used to install, launch and update games. An input validation vulnerability exists in the Privileged Assistant tool in version 1.2.47 of GOG Galaxy for macOS-based platforms. An attacker can use this vulnerability to globally create directories...
Code injection
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
CVE-2018-5927
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
CVE-2018-5927
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
CVE-2018-5927
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
CVE-2018-5927
CVE-2018-5927 affects HP Support Assistant prior to version 8.7.50.3. The HP advisory (C06242762) documents an arbitrary code execution risk via a DLL loading vulnerability exploitable by a local attacker with access to the host; the impact is local code execution with high impact on confidential...
PT-2019-11005
Name of the Vulnerable Software and Affected Versions: HP Support Assistant versions prior to 8.7.50.3 Description: The issue allows an unauthorized person with local access to load arbitrary code. Recommendations: For versions prior to 8.7.50.3, update to version 8.7.50.3 or later to resolve the...
CVE-2018-5927: Undefined Security Weakness
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-002)
The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - A malicious application may be able to execute arbitrary code with kernel privileges. CVE-2019-8555 - A malicious application may be able to determine...
macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-002)
The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - An application may be able to execute arbitrary code with kernel privileges. CVE-2019-8529 - A local user may be able to read kernel memory. CVE-2019-8504 ...
Apple iOS 12.2 Patches 51 Serious Flaws
Apple patched 51 vulnerabilities rated serious with its iOS 12.2 update. One of the most serious bugs could allow apps to secretly listen to end users. Apple’s iOS security updates, announced Monday during its March product announcement event, are for the iPhone 5s and later, iPad Air and later a...
Pixar Renderman Input Validation Vulnerability (CNVD-2019-42872)
Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Assistant tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate privileges to...
Pixar Renderman Elevation of Privilege Vulnerability
Pixar Renderman is a rendering application used in animation and movie production. A local elevation of privilege vulnerability exists in the Installation Assistant tool in version 22.3.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate...
Android TV exposed the bug or cause of the user's private photos leaked-vulnerability warning-the black bar safety net
Recently, Twitter users prashanth broke the news, said he found the Android TV's a bug, or lead to users private photos being leaked. When he connected to a Vu Android TV, and select the“switch to another account”, turned out to be able to view all with this TV the name of the person and the...
Multiple IBM Products Arbitrary File Download Vulnerability
IBM SAN Volume Controller and others are products of IBM.BM SAN Volume Controller SVC simplifies storage infrastructure management, tiered storage, and advanced replication capabilities for storage systems. A security vulnerability exists in Service Assistant in several IBM products. An attacker...
HPSBGN03605 rev.1 - HP Support Assistant DLL Loading Vulnerability
Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported By: Marius Gabriel Mihai VULNERABILITY SUMMARY The vulnerability allows an unauthorized person to load arbitrary code. RESOLUTION Version 8.7.50.3 was released on December 11, 2018...
schoolofrock.com XSS vulnerability
Open Bug Bounty ID: OBB-714895 Description| Value ---|--- Affected Website:| schoolofrock.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
i4 assistant cross-site scripting vulnerability
i4 assistant is a specialized management tool for Apple mobile devices from China for Aipu Information Technology Company. A cross-site scripting vulnerability exists in i4 assistant version 7.85. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via th...
