3270 matches found
CVE-2017-3756
CVE-2017-3756 affects Lenovo Active Protection System for ThinkPad on affected ThinkPad models, with vulnerable versions earlier than 1.82.0.17. The root cause is an unquoted service path that an attacker with local privileges can exploit to execute code with administrative privileges. Lenovo adv...
Design/Logic Flaw
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...
CVE-2017-3751
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...
CVE-2017-3751
CVE-2017-3751 affects the ThinkPad Compact USB Keyboard with TrackPoint driver versions earlier than 1.5.5.0. The issue is an unquoted service path in the driver, enabling an attacker with local privileges to execute code with administrative privileges. Lenovo’s LEN-15061 advisory confirms the im...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US
No description provided...
CVE-2017-9247
Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...
CVE-2017-9247
CVE-2017-9247 concerns the Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID
ThinkPad Compact USB Keyboard with TrackPoint Driver Unquoted Service Path - us
Lenovo Security Advisory: LEN-15061 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3751 Summary Description: An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint...
CVE-2017-6005
Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...
CVE-2017-6005
Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...
Design/Logic Flaw
Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...
CVE-2017-6005
Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...
Multiple Lenovo Products Sierra Wireless WAN Driver Elevation of Privilege Vulnerability
Lenovo IdeaPadMiix 510-12ISK and others are laptop products from Lenovo China.Sierra Wireless WAN driver is one of the wireless drivers from Sierra Wireless Canada. A local exploit exists in the Sierra Wireless WAN driver in various Lenovo products based on Windows 7, 8, and 10 platforms. A local...
ISC BIND 9.x.x < 9.9.10-P1 / 9.10.x < 9.10.5-P1 / 9.11.x < 9.11.1-P1 Multiple Vulnerabilities
According to its self-reported version number, the instance of ISC BIND running on the remote name server is 9.x.x prior to 9.9.10-P1, 9.10.x prior to 9.10.5-P1, or 9.11.x prior to 9.11.1-P1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
Net Monitor for Employees Pro Unordered Service Path Privilege Escalation Vulnerability
NetMonitorForEmployeesProfessional is a remote employee monitoring software, it is a software application for PC platforms, the software size is 13362KB. An out-of-order service path privilege escalation vulnerability exists in Net Monitor for Employees Pro. The vulnerability stems from a "block...
CVE-2017-7180
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and...
CVE-2017-7180
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and...
Security feature bypass
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and...
CVE-2017-7180
CVE-2017-7180 affects Net Monitor for Employees Pro up to version 5.3.4. The issue is an unquoted service path for the service "Net Monitor for Employees Agent", allowing a local attacker with write access to program.exe in a protected directory (e.g., SYSTEMDRIVE) to bypass the security feature ...