14045 matches found
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
Design/Logic Flaw
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
CVE-2020-8337 concerns an unquoted search path vulnerability in the Synaptics Smart Audio UWP app (DCHU drivers) on Lenovo platforms, affecting versions prior to 1.0.83.0. The issue is exploitable locally by an administrative user and could allow arbitrary code execution without user interaction....
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
Jinwei Smart Restaurant suffers from xml injection vulnerability
Jinwei Smart Restaurant is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Intelligent Restaurant has an xml injection vulnerabilit...
Security feature bypass
Huawei smart phones have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products...
File Upload Vulnerability in Smart Garage License Plate Recognition Machines
Shenzhen Fuji Intelligent System Co., Ltd. is a supplier of intelligent entrance/exit management equipment and a professional supplier of intelligent eco-environmental solutions. There is a file upload vulnerability in the Smart Parking License Plate Recognition Machine, which can be exploited by...
WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-40612)
Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...
smart-poker.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179302 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
smartcncs.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1175834 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Multiple Apple Products WebKit Component Type Obfuscation Vulnerability (CNVD-2020-52149)
Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A type-obfuscation vulnerability exists in the WebKit component of several Apple...
ImageIO component buffer overflow vulnerability in multiple Apple products (CNVD-2020-34935)
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Catalina is a specialized operating system developed for Mac computers. imageIO is one of the components that reads and writes image data. ImageIO is a component that reads...
Siemens Simatic Improper Input Validation
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family V4.x incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family V4.x incl. SIPLUS variants All versions with Function State FS 11, SIMATIC S7-200 SMART CPU CR20s 6E...
smartvirtualoffice.com.sg Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170171 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
smartrobotvacuums.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170028 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Vulnerability Spotlight: Memory corruption vulnerability in GNU Glibc leaves smart vehicles open to attack
By Sam Dytrych and Jason Royes. Executive summary Modern automobiles are complex machines, merging both mechanical and computer systems under one roof. As automobiles become more advanced, additional sensors and devices are added to help the vehicle understand its internal and external...
CVE-2019-20792
A use-after-free vulnerability was discovered in OpenSC while disconnecting a smart card. This flaw allows a physical attacker to exploit this vulnerability by inserting and removing a malicious smart card, handled by the coolkey driver, that could potentially execute code on the target system,...
D-Link DSP-W215 Information Disclosure Vulnerability (CNVD-2020-33174)
The D-Link DSP-W215 is a smart plug product from Taiwan, China-based AUO D-Link. A security vulnerability exists in D-Link DSP-W215 version 1.26b03. An attacker can exploit the vulnerability to cause information disclosure...