Cisco stands on guard with our customers in Ukraine

As the Russia-led invasion intensifies, Ukraine is being attacked by bombs and bytes. Cisco is working around the clock on a global, company-wide effort to protect our customers there and ensure that nothing goes dark. Cisco Talos has taken the extraordinary step of directly operating security...

GSD-2022-1000654 ALSA: hda: Fix UAF of leds class devs at unbinding

ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

PT-2022-7662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of memory after it has been freed in the ALSA sound subsystem of the Linux kernel. This is due to a problem with the registration and unregistration of LE...

A Year After SolarWinds, Supply Chain Threats Still Loom

The Russia-led campaign was a wake-up call to the industry, but there's no one solution to the threat...

CVE-2021-33094

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33094

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33094

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095

CVE-2021-33095 describes an unquoted search path in the installer for the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack prior to 1.0.0.4. Affected product/component: Intel NUC M15 Laptop Kit Keyboard LED Service driver pack (before 1.0.0.4). Root cause: unquoted search path in the ins...

CVE-2021-33094

CVE-2021-33094 affects the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack prior to 1.0.0.4. The issue is insecure inherited permissions in the installer, potentially enabling privilege escalation via local access for an authenticated user. Intel Intel-SA-00569 lists this CVE among mult...

CVE-2021-33094: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095: Unquoted Search Path or Element

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20047

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack versions prior to 1.0.0.4 Description The issue concerns insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack. This may...

PT-2021-20048

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack versions prior to 1.0.0.4 Description The issue is related to an unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack. This may allo...

Intel NUC 访问控制错误漏洞

The Intel NUC is a small mini computer from Intel USA. An Access Control Error vulnerability exists in the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack, which stems from a default privilege management error in the product's installer. An attacker could use this vulnerability to cause...

Intel NUC 代码问题漏洞

The Intel NUC is a small mini computer from Intel USA. A code issue vulnerability exists in the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack that stems from a default privilege management error in the product's installer. An attacker could use this vulnerability to cause a denial of...

coloradoledlandscapelighting.com Cross Site Scripting vulnerability OBB-2147706

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

led-aluprofile.com Cross Site Scripting vulnerability OBB-2134548

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

TP-Link UE330 USB Information Disclosure Vulnerability

TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...