1619 matches found
CVE-2022-1890
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...
CVE-2022-1890
CVE-2022-1890 affects Lenovo Notebook products via a buffer overflow in the ReadyBootDxe driver (and related drivers ReadyBootDxe/SystemLoadDefaultDxe/SystemBootManagerDxe). The root cause is insufficient validation of an NVRAM variable (DataSize), enabling local-privilege arbitrary code executio...
CVE-2022-1892: Heap-based Buffer Overflow
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...
CVE-2022-3430: Incorrect Default Permissions
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...
CVE-2022-1891: Heap-based Buffer Overflow
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...
CVE-2022-1890: Heap-based Buffer Overflow
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...
Lenovo Notebook 安全漏洞
Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. The Lenovo Notebook suffers from a security vulnerability that stems from a potential flaw in the WMI installation driver, which could allow an attacker with elevated privileges to modify the secure boot settings by modifying th...
Apache Zeppelin input validation error vulnerability
Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash...
CVE-2022-4020
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
Design/Logic Flaw
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
CVE-2022-4020 Acer Aspire BIOS vulnerability
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
CVE-2022-4020
CVE-2022-4020 affects Acer notebooks via the HQSwSmiDxe DXE driver. The vulnerability lets a user with elevated privileges modify an NVRAM variable to change UEFI Secure Boot settings, potentially disabling Secure Boot and enabling unsigned code execution at boot. Reported affected models include...
PT-2022-25278 · Acer · Acer Notebook
Name of the Vulnerable Software and Affected Versions: Acer Notebook devices affected versions not specified Description: The issue concerns a vulnerability in the HQSwSmiDxe DXE driver that may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by changing an NVRAM...
CVE-2022-4020: Incorrect Default Permissions
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable...
VSCode ipynb Remote Development RCE
VSCode when opening an Jupyter notebook .ipynb file bypasses the trust model. On versions v1.4.0 - v1.71.1, its possible for the Jupyter notebook to embed HTML and javascript, which can then open new terminal windows within VSCode. Each of these new windows can then execute arbitrary code at...
PT-2022-22120 · Lenovo · Lenovo Notebook
Name of the Vulnerable Software and Affected Versions: Lenovo Notebook devices affected versions not specified Description: A potential issue in a driver used during the manufacturing process on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure...
Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US
No description provided...
Jupyter Notebook 代码问题漏洞
Jupyter Notebook is a suite of open source web applications for creating and sharing code and illustrative text documents. A security vulnerability exists in Jupyter Notebook Core versions prior to 4.11.2, which stems from the inclusion of an arbitrary code execution in jupytercore...