PT-2022-19531

Name of the Vulnerable Software and Affected Versions IonizeCMS version 1.0.8.1 Description The issue is related to a command injection vulnerability. It occurs via the function copy lang content in the file application/models/lang model.php. Recommendations For IonizeCMS version 1.0.8.1, as a...

HPESBHF04290 rev.1 - Certain HPE ProLiant DL/ML/MicroServer Servers Using Intel Processors, INTEL-SA-00617, 2022.1 IPU, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HPE ProLiant DL20 Gen10 Plus server - Prior to 1.5804182022 HPE ProLiant ML30 Gen10 Server - Prior to 2.5804142022 HPE...

FUJITSU LIEFBOOK devices: Buffer error vulnerabilities

The FUJITSU LIEFBOOK devices are a laptop computer from Fujitsu FUJITSU Japan. A buffer error vulnerability exists in multiple versions of FUJITSU LIEFBOOK, which stems from the FJGABIFlashCoreAxtractionSMM driver registering a Software System Management Interrupt SWSMI handler that is not...

Multiple MediaTek products have vulnerabilities in their backend links.

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in several MediaTek products, which can be exploited by attackers to disclose local information. mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163,...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking, and can be exploited by an attacker to disclose local information. The following products and versions are...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking, and can be exploited by an attacker to disclose local information. The following products and versions are...

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper input validation, which may result in an out-of-bounds write and can be exploited by an attacker to cause an escalation of local...

MediaTek chip competition conditions and vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which can be exploited by attackers to disclose local information. The following products and versions are affected: chips, MT6580, MT6739, MT6761, MT6762...

HPESBNW04291 rev.4 - Aruba Switches, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2930F Switch Series - See VULNERABILITY SUMMARY section Aruba 2920 Switch Series - See VULNERABILITY SUMMARY section Aruba 2530 Switch Series - See VULNERABILITY SUMMA...

Vulnerabilities in competition conditions of various MediaTek products

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek, which can be exploited by attackers to cause an escalation of privileges. The following products and versions are affected: MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S...

Qualcomm Input Verification Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc. and from time to time fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Modem module of...

Video Conferencing Apps Sometimes Ignore the Mute Button

New research: "Are You Really Muted?: A Privacy Analysis of Mute Buttons in Video Conferencing Apps": Abstract: In the post-pandemic era, video conferencing apps VCAs have converted previously private spaces -- bedrooms, living rooms, and kitchens -- into semi-public extensions of the office. And...

Alac decoder Microchip MediaTek MT6570 MT6580 MT6735 MT6737 MT6739 MT6750

The vulnerability of the Alac decoder in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833,...

CVE-2022-1107

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code...

CVE-2022-1107

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code...

CVE-2021-3970

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...

Input validation

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-4210

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code...

PT-2022-11542 · Lenovo · Thinkstation +2

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop, ThinkStation, and ThinkEdge models affected versions not specified Description: A potential issue in the SMI callback function used in the NVME driver may allow an attacker with local access and elevated privileges to execute...

CVE-2020-14120

Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to pass in parameters, and attackers can induce users to install a malicious app and use the vulnerability to achieve elevated privileges,...