CVE-2023-23370 QVPN Device Client

An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors. We have...

CVE-2023-23370

The CVE-2023-23370 issue affects QVPN Device Client (Windows) with the root cause being insufficient protection of credentials. Versions prior to 2.1.0.0518 are vulnerable; exploitation could allow local authenticated administrators to gain access to user accounts and sensitive data via unspecifi...

CVE-2023-23370 QVPN Device Client

An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors. We have...

PT-2023-5851 · Qvpn · Qvpn Windows +1

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.1.0.0518 Description: The issue is related to insufficient protection of credentials, which could allow local authenticated administrators to gain access to user accounts and sensitive data via unspecifi...

PT-2023-5850 · Qvpn · Qvpn Device Client

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.2.0.0823 Description: A cleartext transmission of sensitive information issue has been reported, which could allow local authenticated administrators to read sensitive data via unspecified vectors...

CVE-2023-3078

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

Path traversal

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

CVE-2023-3078

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

Lenovo Universal Device Client 代码问题漏洞

Lenovo Universal Device Client is a universal device client from the Chinese company Lenovo. A code issue vulnerability exists in Lenovo Universal Device Client that originates from allowing an attacker with local access privileges to elevate privileges and execute code...

The vulnerability of the QVPN Device Client client, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the QVPN Device Client is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2023-3970 · Unknown · Qvpn Device Client

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.0.0.1310 QVPN Device Client versions prior to 2.0.0.1316 Description: The issue is related to an insecure library loading vulnerability. If exploited, it could allow local attackers who have gained user...

The vulnerability in the set of tools for developing the Hub Device Client SDK for a service that implements artificial intelligence through Azure IoT Edge allows a intruder to execute arbitrary code.

The vulnerability of the Hub Device Client SDK component of the Azure IoT Edge service, which enables the implementation of artificial intelligence capabilities on local devices, is related to errors in the mechanism for accessing objects in memory. Exploiting this vulnerability could allow a...

CVE-2018-8531

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...

CVE-2018-8531

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...

Microsoft Azure IoT Device Client SDK Remote Memory Corruption Vulnerability

Microsoft C SDK for Azure IoT is a C-based software development kit for developing Azure IoT Internet of Things platform applications from Microsoft. A remote memory corruption vulnerability exists in the Microsoft Azure IoT Device Client SDK. An attacker can exploit this vulnerability to execute...

Azure IoT Device Client SDK Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who...

KLA11330 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Azure IoT Device Client SDK can be...

CVE-2017-13210

In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is n...