CVE-2020-6920

CVE-2020-6920 affects HP Support Assistant. According to connected documents, multiple vulnerabilities have been identified in HP Support Assistant software, including privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of fil...

CVE-2020-6921

CVE-2020-6921 affects HP Support Assistant. The record documents potential security vulnerabilities including compromise of integrity and the ability to communicate with untrusted clients. No exploitation details are provided in the connected documents. The CVE entry is linked to HP’s advisory HP...

CVE-2020-6922

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

CVE-2020-6917

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

CVE-2020-6917

CVE-2020-6917 concerns HP Support Assistant with vulnerabilities that can compromise integrity and allow communication with untrusted clients. Connected sources describe authorization issues in HP Support Assistant and cross-referenced CVEs (including 6917) affecting multiple versions. The HP adv...

CVE-2020-6919

CVE-2020-6919 relates to HP Support Assistant vulnerabilities leading to potential integrity compromise and communication with untrusted clients. Documented issues include privilege escalation, unauthorized file modifications, and exposure of sensitive data. Exploitation details are not provided ...

CVE-2020-6919

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

CVE-2020-6918

CVE-2020-6918 affects HP Support Assistant. The connected sources describe multiple vulnerabilities in HP Support Assistant software, including privilege escalation, integrity compromise, and the ability to communicate with untrusted clients. HP advises updating to the latest HP Support Assistant...

PT-2022-9053 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A security issue has been identified in the HP Support Assistant software, potentially compromising its integrity and allowing communication with untrusted clients...

PT-2022-9056 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: The issue concerns potential security vulnerabilities, including compromise of integrity and allowed communication with untrusted clients. Recommendations: At the moment, there...

PT-2022-9054 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A security issue has been identified in the HP Support Assistant software, potentially compromising its integrity and allowing communication with untrusted clients...

PT-2022-9055 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A security issue has been identified in the HP Support Assistant software, potentially compromising its integrity and allowing communication with untrusted clients...

Reentrancy allows commenter to overwrite own comments

Lines of code Vulnerability details Since the Lens platform is a blockchain-based social media platform, it's important that information relevant to users be emitted so that light clients need not continually refer to the blockchain, which can be expensive. From the docs: Events are emitted at...

CVE-2022-22779

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to...

Code injection

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to...

CVE-2022-22779

Summary: CVE-2022-22779 affects Keybase Clients for macOS and Windows prior to version 5.9.0. The issue is that exploded messages initiated by a user may not be properly removed if the receiving user switches to a non-chat feature and the host enters sleep before the messages are exploded, potent...

Rocky Linux 8 : nss (RLSA-2021:4903)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4903 advisory. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures...

GHSA-QQ97-VM5H-RRHG OCI Manifest Type Confusion Issue

Impact Systems that rely on digest equivalence for image attestations may be vulnerable to type confusion. Patches Upgrade to at least v2.8.0-beta.1 if you are running v2.x release. If you use the code from the main branch, update at least to the commit after...

keycloak-services: POST based reflected Cross Site Scripting vulnerability

A flaw has been found in Keycloak. The clients-registrations endpoint allows execution of javascript code on the client-side, which makes it vulnerable to a Cross-Site Scripting attack...

CVE-2021-44142

An out-of-bounds heap read write vulnerability was found in Samba. Due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module vfsfruit, a remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and...