CVE-2023-6338

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

Path traversal

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

CVE-2023-6338

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...

Lenovo Universal Device Client Code Issue Vulnerability

Lenovo Universal Device Client is a universal device client from the Chinese company Lenovo. A code issue vulnerability exists in Lenovo Universal Device Client that originates from allowing an attacker with local access privileges to elevate privileges and execute code...

PT-2024-14934 · Lenovo · Lenovo Universal Device Client

Name of the Vulnerable Software and Affected Versions: Lenovo Universal Device Client UDC affected versions not specified Description: Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code wi...

CVE-2023-49246

creationtimestamp| type| source ---|---|--- 2023-12-30 08:36:29+00:00| seen| https://t.me/ctinow/160810...

CVE-2023-5953

creationtimestamp| type| source ---|---|--- 2023-12-23 10:21:48+00:00| seen| Telegram/sTzANlDXmaDlJ59-VUABZJwblKj7h8xAL5HVnc7QydKXefC...

instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability

Talos Vulnerability Report TALOS-2023-1907 instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability December 23, 2023 CVE Number CVE-2023-49594 SUMMARY An information disclosure vulnerability exists in the challenge functionality of instipod...

CVE-2023-42697

creationtimestamp| type| source ---|---|--- 2023-12-22 13:56:40+00:00| seen| https://t.me/ctinow/158382...

CVE-2023-32847

creationtimestamp| type| source ---|---|--- 2023-12-22 10:51:57+00:00| seen| https://t.me/ctinow/158303...

PT-2023-22278 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Heimdal Thor agent versions 3.4.2 through 3.7.0 Description: An issue in the Heimdal Thor agent allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via the Next-Gen Antivirus component...

The vulnerability of the USB 3.0 HUB driver in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB 3.0 HUB driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

USN-6534-3 linux-hwe-6.2, linux-lowlatency-hwe-6.2, linux-nvidia-6.2 vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

Microsoft Windows USB Mass Storage Class Driver Security Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in the Microsoft Windows USB Mass Storage Class Driver. An attacker could exploit the vulnerability to remotely execute code. The following products and editio...

USN-6548-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-xilinx-zynqmp vulnerabilities

It was discovered that Spectre-BHB mitigations were missing for Ampere processors. A local attacker could potentially use this to expose sensitive information. CVE-2023-3006 It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors i...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-49999

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...

CVE-2015-3337

creationtimestamp| type| source ---|---|--- 2023-12-06 13:16:12+00:00| seen| https://t.me/arpsyndicate/1488...

CLSA-2023-1701801241 Fix of 8 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb:...

CVE-2023-48695 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host and...