Lenovo Diagnostics Path Traversal Vulnerability

Lenovo Diagnostics is China's Lenovo Lenovo is a Lenovo computer scanning and diagnostic hardware failure tool. The tool can help users to scan the computer, check the computer driver problems to repair the operation, Lenovo Diagnostics can also help users to easily solve some of the computer blu...

CVE-2020-14761: Undefined Security Weakness

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14840: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

PT-2020-4444

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Diagnostics component of the Oracle Application Object Library. It allows an unauthenticated attacker...

OX App Suite / OX Documents 7.10.3 XSS / Server-Side Request Forgery

Product: OX App Suite / OX Documents Vendor: OX Software GmbH Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.2, 7.10.3 Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev29, 7.10.3-rev15 Vendor notificatio...

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

Path traversal

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8338

CVE-2020-8338 affects Lenovo Diagnostics. A DLL search path vulnerability in Lenovo Diagnostics prior to version 4.35.4 could allow a local attacker to execute code with elevated privileges. Lenovo’s advisory confirms privilege escalation potential and recommends upgrading to Lenovo Diagnostics 4...

CVE-2020-8338: Untrusted Search Path

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

PT-2020-20105

Name of the Vulnerable Software and Affected Versions Lenovo Diagnostics versions prior to 4.35.4 Description A DLL search path issue was reported that could allow a user with local access to execute code on the system. Recommendations For versions prior to 4.35.4, update to version 4.35.4 or lat...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Windows Mobile Device Management (MDM) Diagnostics component for Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Mobile Device Management MDM Diagnostics component of Windows operating systems is related to improper handling of connections. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created...

PT-2020-15386

Name of the Vulnerable Software and Affected Versions Sagemcom F@ST3686 version 1.0 HUN 3.97.0 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. Technical details abo...

CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...

CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...

CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...