Lucene search
+L

171 matches found

CNNVD
CNNVD
•added 2022/05/24 12:00 a.m.•27 views

Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, Inc. A privilege permission and access control issue vulnerability exists in Google Chrome versions 70.0.3538.67 through 101.0.4951.67, which stems from insufficient policy enforcement in the file system API. A remote attacker could exploit the...

4.3CVSS6.2AI score0.00563EPSS
SaveExploits0References12
OSV
OSV
•added 2022/05/18 4:15 p.m.•15 views

CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7CVSS7.1AI score0.01925EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/18 4:15 p.m.•37 views

CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7.8CVSS0.01925EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/18 4:15 p.m.•12 views

CVE-2021-3922

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe...

7CVSS7.1AI score0.01925EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/18 4:15 p.m.•35 views

Race condition

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe...

4.4CVSS6.6AI score0.01925EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/05/18 4:15 p.m.•22 views

Code injection

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

4.4CVSS6.7AI score0.01925EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/18 4:10 p.m.•46 views

CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7.8CVSS7.7AI score0.01925EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/18 4:10 p.m.•78 views

CVE-2021-3969

TOCTOU vulnerability CVE-2021-3969 affects Lenovo System Interface Foundation’s IMController before version 1.1.20.3, enabling local privilege elevation due to a race condition in Time of Check/Time of Use. Impact is local privilege escalation with partial confidentiality/integrity/availability i...

7.8CVSS6.7AI score0.01925EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/05/18 4:10 p.m.•86 views

CVE-2021-3922

CVE-2021-3922 affects Lenovo System Interface Foundation’s IMController, where a race condition in the IMController process enables a local attacker to interact with the IMController child process via its named pipe. The vulnerability is associated with versions prior to 1.1.20.3. Impact is descr...

7.8CVSS6.6AI score0.01925EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/18 4:10 p.m.•49 views

CVE-2021-3922

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe...

7.8CVSS7.6AI score0.01925EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•4 views

CVE-2021-3969: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7.8CVSS7.1AI score0.01925EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•4 views

CVE-2021-3922: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe...

7.8CVSS7AI score0.01925EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/01/04 12:00 a.m.•15 views

The vulnerability of the IMController component, which is part of the system services, drivers, and additional modules of the Lenovo System Interface Foundation, allows attackers to escalate their privileges.

The vulnerability of the IMController component, which is part of the system services, drivers, and additional modules of the Lenovo System Interface Foundation, stems from a “race condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.1AI score0.01925EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/04 12:00 a.m.•20 views

The vulnerability of the IMController component, which is part of the system services, drivers, and additional modules of the Lenovo System Interface Foundation, allows attackers to escalate their privileges.

The vulnerability of the IMController component, which is part of the system services, drivers, and additional modules of the Lenovo System Interface Foundation, stems from a “race condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.1AI score0.01925EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2021/08/13 1:22 a.m.•49 views

[SECURITY] Fedora 34 Update: perl-Encode-3.12-460.fc34

The Encode module provides the interface between Perl strings and the rest of the system. Perl strings are sequences of characters...

7.8CVSS4AI score0.01392EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•15 views

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

9.4CVSS7.5AI score0.08084EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/02/19 12:00 a.m.•15 views

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

7.3CVSS7AI score0.05439EPSS
SaveExploits0References13Affected Software7
OSV
OSV
•added 2021/02/09 2:15 p.m.•10 views

DEBIAN-CVE-2021-21141

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page...

6.5CVSS7.2AI score0.05439EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/20 12:00 a.m.•16 views

Google Chrome Backlink Vulnerability

Google Chrome is a web browser from Google, Inc. in the United States. A backlink vulnerability previously existed in Google Chromium version 88.0.4324.96, which stemmed from the discovery of insufficient policy enforcement security in the program's file system API component...

8.1CVSS7.3AI score0.08084EPSS
SaveExploits0References7
Lenovo
Lenovo
•added 2020/10/06 11:15 p.m.•28 views

Lenovo Vantage HardwareScan Plugin Vulnerability - Lenovo Support US

No description provided...

7.8CVSS7.6AI score0.00424EPSS
SaveExploits0
Rows per page
Query Builder