4349 matches found
Security Bulletin: IBM Support Assistant (CVE-2014-0050)
Summary The IBM® Support Assistant Team Server is shipped with the Apache Commons FileUpload™ library which contains a security vulnerability which may lead to a denial of service against IBM Support Assistant Team Server. Vulnerability Details CVEID:CVE-2014-0050 DESCRIPTION: Apache Commons...
Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for IBM Support Assistant January 2014 CPU
Summary Multiple security vulnerabilities exist in the IBM® SDK for Java™ that is shipped with IBM Support Assistant Vulnerability Details The IBM Support Assistant Team Server is shipped with an IBM SDK for Java that is based on the Oracle JDK. Oracle has released January 2014 critical patch...
Researchers discover vulnerabilities in smart assistants’ voice commands
Virtual personal assistants VPA, also known as smart assistants like Amazon’s Alexa and Google’s Assistant, are in the spotlight for vulnerabilities to attack. Take, for example, that incident about an Oregon couple’s Echo smart speaker inadvertently recording their conversation and sending it to...
Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate
After an Alexa-enabled Echo device recorded and shared a private conversation of its unknowing owners, the tech industry – and the public – is casting a wary eye on voice assistant privacy issues. On Thursday, news emerged that a Portland family’s Echo device had recorded a conversation of them –...
Unspecified Vulnerability in SAP Note Assistan
SAP Note Assistant is a tool to help automate the import of changes in SAP Notes, a document created by a developer who finds a bug in an ABAP program that describes the problem and the associated program modification code. An unspecified vulnerability exists in SAP Note Assistant. An attacker...
Oracle WebLogic Remote Diagnosis Assistant rda_tfa_hrs Command Injection (CVE-2018-2616)
A command injection vulnerability exists in the web console of the Oracle WebLogic Remote Diagnosis Assistant. The vulnerability is due to a failure on the part of the application to properly parse input supplied to the rdatfahrs menu command...
Amazon Alexa Has Got Some Serious Skills—Spying On Users!
"Alexa, are you spying on me?" — aaaa.....mmmm.....hmmm.....maybe!!! Security researchers have developed a new malicious 'skill' for Amazon's popular voice assistant Alexa that can turn your Amazon Echo into a full-fledged spying device. Amazon Echo is an always-listening voice-activated smart ho...
zuerioberland-tourismus.ch XSS vulnerability
Open Bug Bounty ID: OBB-603483 Description| Value ---|--- Affected Website:| zuerioberland-tourismus.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Description of Calendar Printing Assistant for Office Outlook 2007 SP3
Describes the improvements that Calendar Printing Assistant for Office Outlook 2007 SP3 provides and the issues that it fixes.IntroductionCalendar Printing Assistant for Microsoft Office Outlook 2007 Service Pack 3 SP3 provides the latest updates to Calendar Printing Assistant for Office Outlook...
Qualys: Cloud Security Must Move Towards ‘Transparent Orchestration’
What does the “My Little Pony” television series and cyber security have in common? Ask Qualys Chief Product Officer Sumedh Thakar. Whenever his 7-year old daughter wanted to see an episode of this show, the process involved multiple steps: Turning on the smart TV, scrolling through the app menu,...
curl/curl_fuzzer_http: Stack-buffer-overflow in fuzz_handle_transfer
Detailed report: https://oss-fuzz.com/testcase?key=5569625854050304 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7fff6a3b0910 Crash State: fuzzhandletransfe...
rioimoveisonline.com.br XSS vulnerability
Open Bug Bounty ID: OBB-573457 Description| Value ---|--- Affected Website:| rioimoveisonline.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SAP Note Assistant XML External Entity Injection Vulnerability
SAP Note Assistant is a tool to help automate the import of changes in SAP Notes, a document created by a developer who finds a bug in an ABAP program that describes the problem and the associated program modification code. An XML external entity injection vulnerability exists in SAP Note...
HP Support Assistant Privilege Escalation Vulnerability - Windows
HP Support Assistant is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM San Volume Controller / Storwize / FlashSystem 8.1.x < 8.1.0.1 privilege escalation vulnerability
According to its self-reported version number, the IBM San Volume Controller, Storwize or FlashSystem is vulnerable to an unspecified privilege escalation vulnerability within the Service Assistant GUI. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106844;...
HP Support Assistant Elevation of Privilege Vulnerability
HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. An elevation of privilege vulnerability exists in HP Support Assistant. An attacker could use this vulnerability to elevate privileges and chang...
CVE-2017-2744
The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...
CVE-2017-2744
The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...
