Lucene search
+L

118 matches found

NVD
NVD
•added 2021/11/17 7:15 p.m.•31 views

CVE-2021-33089

Improper access control in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/17 6:56 p.m.•59 views

CVE-2021-33089

CVE-2021-33089 affects the Intel NUC HDMI Firmware Update Tool for NUC8i3BE/NUC8i5BE/NUC8i7BE. The root cause is improper access control in the software installer, which may allow an authenticated local user to escalate privileges. Impact is described as privilege escalation with high confidentia...

7.8CVSS7.8AI score0.00246EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•6 views

CVE-2021-33090: Incorrect Default Permissions

Incorrect default permissionsin the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00228EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•7 views

CVE-2021-0096: Improper Authentication

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•4 views

PT-2021-12902

Name of the Vulnerable Software and Affected Versions: IntelR NUC HDMI Firmware Update Tool versions prior to 1.78.1.1 Description: The issue is related to improper authentication in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via...

7.8CVSS0.00234EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•6 views

PT-2021-20041

Name of the Vulnerable Software and Affected Versions IntelR NUC HDMI Firmware Update Tool versions prior to 1.78.4.0.4 Description The issue is related to improper access control in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via...

7.8CVSS0.00246EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•5 views

CVE-2021-33089: Undefined Security Weakness

Improper access control in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•5 views

PT-2021-20043

Name of the Vulnerable Software and Affected Versions IntelR NUC HDMI Firmware Update Tool versions prior to 1.78.2.0.7 Description The issue is related to incorrect default permissions in the software installer, which may allow an authenticated user to potentially enable escalation of privilege...

7.8CVSS0.00228EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•21 views

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC HDMI Firmware Update Tool that allows privileged escalation. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:CVEID: cve - 201 -0096...

7.8CVSS7.4AI score0.00228EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•21 views

Intel NUC 授权问题漏洞

The Intel NUC is a small mini computer from Intel USA. An authorization issue vulnerability exists in the Intel NUC HDMI Firmware Update Tool, which originates from a privilege management error in the product's installer. An attacker could cause privilege escalation through this vulnerability...

7.8CVSS7.4AI score0.00234EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2020/12/21 12:00 a.m.•20 views

Pengutronix RAUC Security Vulnerability

Pengutronix RAUC is a software from the Pengutronix organization that provides automatic updates for embedded Linux systems. A security vulnerability exists in Pengutronix RAUC update, which stems from a time-of-use check vulnerability in the install.c module that verifies the signature of an...

7.1CVSS6.9AI score0.01434EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2020/11/12 7:15 p.m.•9 views

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.3AI score0.00292EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•8 views

CVE-2020-24525: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00292EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•5 views

PT-2020-4925

Name of the Vulnerable Software and Affected Versions: IntelR NUCs affected versions not specified Description: The issue is related to insecure inherited permissions in the firmware update tool for some IntelR NUCs. This may allow an authenticated user to potentially enable escalation of privile...

7.8CVSS0.00292EPSS
SaveExploits1References9
CNVD
CNVD
•added 2020/09/29 12:00 a.m.•11 views

Denial of Service Vulnerability in IObit DriverBooster

IObitDriverBooster is an effective and simple driver update tool, which is a driver management software from IObit. A denial of service vulnerability exists in IObit DriverBooster, which can be exploited by an attacker to cause a denial of service...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•16 views

The vulnerability of the Cisco UCS Series C microprogramming software’s BIOS update tool allows a hacker to load a malicious software image onto a vulnerable device.

The vulnerability of the Cisco UCS Series C microprogramming software’s BIOS update tool is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to load the malicious software onto a vulnerable device...

6.8CVSS6.5AI score0.00247EPSS
SaveExploits0References2Affected Software5
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•18 views

eDeploy Code Issue Vulnerability

eDeploy is a configuration and update tool for Linux systems. A security vulnerability exists in eDeploy. An attacker could exploit the vulnerability to execute code...

9.8CVSS7.1AI score0.0237EPSS
SaveExploits1References1
OSV
OSV
•added 2018/10/10 6:29 p.m.•14 views

CVE-2018-12158

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...

6CVSS5.8AI score0.00329EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/05 12:00 a.m.•17 views

commandline package update tool zypper proxy certificate write log file vulnerability

commandline package update tool zypper is a commandline tool for updating zypper packages. A security vulnerability exists in commandline package update tool zypper, which originates when the program writes HTTP proxy credentials to the log. A local attacker can use this vulnerability to gain...

4CVSS6.9AI score0.00331EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/09/26 12:00 a.m.•15 views

Red Hat eDeploy Arbitrary Code Execution Vulnerability

Red Hat eDeploy is an update configuration tool for Linux systems from Red Hat USA. A security vulnerability exists in Red Hat eDeploy. A remote attacker could exploit the vulnerability to execute arbitrary code...

9.8CVSS7.5AI score0.03011EPSS
SaveExploits0References1
Rows per page
Query Builder