Lucene search
+L

3551 matches found

CNVD
CNVD
•added 2017/10/18 12:00 a.m.•14 views

Progea Movicon SCADA/HMI Elevation of Privilege Vulnerability

Movicon is Scada/HMI industrial monitoring software developed by the Italian automation software provider PROGEA. An elevation of privilege vulnerability exists in Progea Movicon SCADA/HMI that allows an authorized local user to insert arbitrary code into an unreferenced service path and escalate...

6.7CVSS7.1AI score0.00406EPSS
SaveExploits2References1
zdt
zdt
•added 2017/09/04 12:00 a.m.•19 views

TeraCopyService 3.1 Unquoted Service Path Privilege Escalation Vulnerability

TeraCopyService version 3.1 suffers from an unquoted service path privilege escalation vulnerability. Exploit Title: TeraCopyService 3.1 - Unquoted Service Path Privilege Escalation Date of Discovery: August 31 2017 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vend...

7.4AI score
SaveExploits0
OSV
OSV
•added 2017/08/29 1:35 a.m.•11 views

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

7.8CVSS5.9AI score0.0037EPSS
SaveExploits0References1
Prion
Prion
•added 2017/08/29 1:35 a.m.•17 views

Design/Logic Flaw

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

7.2CVSS7.6AI score0.0037EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/08/28 8:00 p.m.•30 views

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

8.3AI score0.0037EPSS
SaveExploits0References1
CVE
CVE
•added 2017/08/28 8:00 p.m.•67 views

CVE-2017-3757

CVE-2017-3757 affects Lenovo notebooks (excluding ThinkPads) with the ElanTech Touchpad driver. The vulnerability is an unquoted service path that could allow a local attacker to execute code with administrative privileges. The issue is documented across multiple sources (NVD entry, CNVD, Lenov o...

7.8CVSS7.8AI score0.0037EPSS
SaveExploits0References1Affected Software1
Lenovo
Lenovo
•added 2017/08/24 12:00 a.m.•19 views

Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - Lenovo Support US

No description provided...

8AI score
SaveExploits0
NVD
NVD
•added 2017/08/18 7:29 p.m.•26 views

CVE-2017-3756

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

7.8CVSS7.8AI score0.00376EPSS
SaveExploits0References2
Prion
Prion
•added 2017/08/18 7:29 p.m.•26 views

Privilege escalation

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

7.2CVSS7.8AI score0.00376EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/08/18 7:00 p.m.•36 views

CVE-2017-3756

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

8.4AI score0.00376EPSS
SaveExploits0References2
CVE
CVE
•added 2017/08/18 7:00 p.m.•110 views

CVE-2017-3756

CVE-2017-3756 affects Lenovo Active Protection System for ThinkPad on affected ThinkPad models, with vulnerable versions earlier than 1.82.0.17. The root cause is an unquoted service path that an attacker with local privileges can exploit to execute code with administrative privileges. Lenovo adv...

7.8CVSS7.9AI score0.00376EPSS
SaveExploits0References2Affected Software148
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/18 12:00 a.m.•4 views

CVE-2017-3756: Undefined Security Weakness

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

7.8CVSS5.9AI score0.00376EPSS
SaveExploits0References1
Prion
Prion
•added 2017/08/10 12:29 a.m.•24 views

Design/Logic Flaw

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...

7.2CVSS7.6AI score0.0037EPSS
SaveExploits0References1
Lenovo
Lenovo
•added 2017/08/10 12:00 a.m.•5 views

Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US

No description provided...

8AI score
SaveExploits0
CVE
CVE
•added 2017/08/10 12:00 a.m.•65 views

CVE-2017-3751

CVE-2017-3751 affects the ThinkPad Compact USB Keyboard with TrackPoint driver versions earlier than 1.5.5.0. The issue is an unquoted service path in the driver, enabling an attacker with local privileges to execute code with administrative privileges. Lenovo’s LEN-15061 advisory confirms the im...

7.8CVSS7.7AI score0.0037EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/08/10 12:00 a.m.•37 views

CVE-2017-3751

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...

8.2AI score0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/10 12:00 a.m.•5 views

CVE-2017-3751: Unquoted Search Path or Element

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...

7.8CVSS6.1AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/08/02 7:00 p.m.•29 views

CVE-2017-9247

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...

8.1AI score0.00302EPSS
SaveExploits0References2
CVE
CVE
•added 2017/08/02 7:00 p.m.•71 views

CVE-2017-9247

CVE-2017-9247 concerns the Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID

7.8CVSS7.6AI score0.00302EPSS
SaveExploits0References2Affected Software3
Lenovo
Lenovo
•added 2017/07/27 12:00 a.m.•49 views

ThinkPad Compact USB Keyboard with TrackPoint Driver Unquoted Service Path - us

Lenovo Security Advisory: LEN-15061 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3751 Summary Description: An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint...

7.2CVSS7.5AI score0.0037EPSS
SaveExploits0
Rows per page
Query Builder