CVE-2018-14810

CVE-2018-14810 affects WECON PI Studio HMI: parsing of specific files can write past the end of an allocated object in PI Studio HMI 4.1.9 and earlier and PI Studio 4.2.34 and earlier, enabling code execution with administrator privileges. Notable connected sources confirm related out-of-bounds w...

Wecon LeviStudioU Buffer Overflow Vulnerability

Wecon LeviStudioU is a set of HMI programming software from Wecon Technologies, China. A security vulnerability exists in the parsing of TIFF images in Wecon LeviStudioU. The vulnerability can be exploited by a remote attacker to execute arbitrary code in the context of the administrator...

CVE-2018-9069

The CVE-2018-9069 entry concerns a race condition in the BIOS flash device locking mechanism on Lenovo IdeaPad consumer notebooks. The issue can allow an attacker with administrator access to alter BIOS contents due to insufficient protection of the locking mechanism. Affects Lenovo consumer note...

CVE-2018-9069 BIOS Write Protection Race Condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

CVE-2018-9069

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

Race condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

CVE-2018-9069

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

BIOS Write Protection Race Condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

CVE-2018-9282

An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a...

BIOS Write Protection Race Condition - US

Lenovo Security Advisory: LEN-20184 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9069 Summary Description: In several consumer notebook models, a race condition in BIOS flash device locking mechanism is not adequately protected...

CVE-2018-8889

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

Western Digital My Cloud Authentication Bypass Vulnerability

Western Digital MyCloud is a personal cloud storage device. An authentication bypass vulnerability exists in Western Digital My Cloud, which can be exploited by an unauthenticated attacker to authenticate as an administrator user without providing a password, allowing full control of the My Cloud...

CVE-2018-16515

Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation...

Intel Driver and Support Assistant Privilege License and Access Control Issues Vulnerability

Intel Driver and Support Assistant is an Intel driver and support management tool from Intel Corporation USA. The tool is mainly used to get the latest applications provided by Intel. A vulnerability exists in the Intel Driver and Support Assistant due to privilege-granting and access control...

CVE-2018-12150

Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access...

CVE-2018-12168

Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-12148

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access...

CVE-2018-16437

Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator...

CVE-2017-16748

CVE-2017-16748 affects Tridium Niagara AX/Niagara 4 platforms: Niagara AX Framework 3.8 and earlier and Niagara 4 Framework 4.4 and earlier. The issue is improper authentication where an attacker can log in using a disabled account name with a blank password and gain administrator privileges on t...

CVE-2017-16748

An attacker can log into the local Niagara platform Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system...