247 matches found
CVE-2023-32673
CVE-2023-32673 affects HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware. The issue is a potential elevation of privilege in these HP components; HP advisories reference a buffer overflow as part of the risk and note mitigations via updates (minimum versi...
CVE-2023-32673
Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...
PT-2023-23949 · Hewlett Packard · Hp Pc Hardware Diagnostics Windows +2
Name of the Vulnerable Software and Affected Versions: HP PC Hardware Diagnostics Windows affected versions not specified HP Image Assistant affected versions not specified HP Thunderbolt Dock G2 Firmware affected versions not specified Description: The issue concerns certain versions of HP PC...
HP PC 安全漏洞
HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in HP PC Hardware Diagnostics Windows, HP Image Assistant and HP Thunderbolt Dock G2 Firmware. An attacker could exploit the vulnerability to elevate privileges...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
Privilege escalation
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
The CVE-2022-4569 entry concerns Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool. Affected component is the firmware update tool; root cause is insufficient input validation within the tool, enabling a local attacker to execute code with elevated privileges during a package upgr...
ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool 安全漏洞
Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool is a firmware update tool from Lenovo China. A security vulnerability exists in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool, which originated from a vulnerability that allows an attacker with local access...
ThinkPad Dock Firmware Update Tool Elevation of Privilege Vulnerability - Lenovo Support US
No description provided...
PT-2023-3168 · Lenovo · Thinkpad Hybrid Usb-C With Usb-A Dock
Name of the Vulnerable Software and Affected Versions: ThinkPad Hybrid USB-C with USB-A Dock affected versions not specified Description: The issue is related to insufficient input validation in the firmware update tool, which could allow an attacker with local access to execute code with elevate...
SUSE: Security Advisory (SUSE-SU-2020:3507-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A privilege-granting and access-control issue vulnerability exists in the dock component of Apple macOS. The vulnerability stems from an application not properly applying security restrictions to th...
About the security content of Security Update 2021-003 Catalina
About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
Dräger X-dock Use of Hard-coded Credentials Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dr��ger X-dock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the display. The firmware and filesystem contain hard-code...
CVE-2021-28112
Draeger X-Dock Firmware before 03.00.13 has Active Debug Code on a debug port, leading to remote code execution by an authenticated attacker...