3003 matches found
Dell SupportAssist Client 跨站脚本漏洞
Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive technologies for troubleshooting and more. A cross-site scripting vulnerability exists in Dell SupportAssist Client Consumer 3.10.4 and earlier and Dell SupportAssist Client...
Dell SupportAssist Client 代码问题漏洞
Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. The Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial code issue vulnerability could be exploited by an attacker...
CVE-2022-30702
Trend Micro Security 2022 and 2021 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine...
CVE-2022-30703
Trend Micro Security 2021 and 2022 Consumer is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation...
CVE-2022-30702
Trend Micro Security 2022 and 2021 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine...
CVE-2022-30703
CVE-2022-30703 affects Trend Micro Security (Consumer) 2021 and 2022. The issue is an exposed dangerous method in the NCIE Scanner/module that can allow a local attacker to disclose sensitive information, including leaked kernel addresses, and could potentially be chained to achieve privilege esc...
CVE-2022-30702
Trend Micro Security 2022 and 2021 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine...
CVE-2022-30702
CVE-2022-30702 affects Trend Micro Security (Consumer) 2021/2022. The confirmed issue is an Out-of-Bounds Read Information Disclosure in the NCIE Scanner module, caused by improper validation that can enable a local attacker to disclose sensitive data on an affected machine. Exploitation context ...
CVE-2022-30702: Out-of-bounds Read
Trend Micro Security 2022 and 2021 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to disclose sensitive information on an affected machine...
CVE-2022-29092
Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...
CVE-2022-30703: Undefined Security Weakness
Trend Micro Security 2021 and 2022 Consumer is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation...
Twitter Fined $150 Million for Misusing Users' Data for Advertising Without Consent
Twitter, which is in the process of being acquired by Tesla CEO Elon Musk, has agreed to pay $150 million to the U.S. Federal Trade Commission FTC to settle allegations that it abused non-public information collected for security purposes to serve targeted ads. In addition to the monetary penalty...
CVE-2022-28394: Uncontrolled Search Path Element
EOL Product CVE - Installer of Trend Micro Password Manager Consumer versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Please note that this was reported on an EOL...
PT-2022-18998
Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager Consumer versions 3.7.0.1223 and below Description The issue is related to the DLL search path in the installer, which may lead to insecurely loading Dynamic Link Libraries. This was reported on an end-of-life...
CVE-2022-29248
Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets the cookie via the Set-Cookie header, allowing a malicious server ...
Trend Micro Security 缓冲区错误漏洞
Trend Micro Security Consumer is an antivirus software from Trend Micro. A buffer error vulnerability exists in Trend Micro Security Consumer versions 17 through 17.7.1130 that originates from a boundary condition. A local attacker could exploit the vulnerability to access potentially sensitive...
Trend Micro Security 安全漏洞
Trend Micro Security Consumer is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security Consumer versions 17 through 17.7.1383 that originates from exposing a dangerous method in the application. A local attacker could exploit the vulnerability to gain...
CVE-2022-30523
Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...
CVE-2022-30523: Improper Link Resolution Before File Access
Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...
