HPSBHF03560 rev 1 - Possible Elevation of Privilege and Information Disclosure via Intel® Software Guard Extensions (Intel® SGX) Vulnerability

Potential Security Impact Elevation of privilege, information disclosure Source: Intel Reported by: Intel VULNERABILITY SUMMARY Intel has discovered a vulnerability that could impact the security of Intel® Software Guard Extensions Intel® SGX. Before exploiting this vulnerability, the malicious...

CVE-2017-3754

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code...

CVE-2017-3754

The CVE-2017-3754 entry relates to Lenovo notebook BIOS write protections not being properly configured, allowing an attacker with physical or administrative access to flash an arbitrary BIOS image and potentially run malicious BIOS code. Connected documents corroborate a BIOS write-protection co...

PT-2017-16086

Name of the Vulnerable Software and Affected Versions Lenovo notebook systems affected versions not specified Description The issue concerns Lenovo brand notebook systems where write protections are not properly configured in the system BIOS. This could allow an attacker with physical or...

CVE-2017-3754: Undefined Security Weakness

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code...

Cross-Site Request Forgery (CSRF)

Jupyter notebook is vulnerable to cross-site request forgery CSRF attacks. It does not properly check the CSRF token and set authorization header. Attackers could create untitled files and start kernels no remote execution or modification of existing files for users of certain browsers Firefox,...

Lenovo Notebook and ThinkServer Local Elevation of Privilege Vulnerability

Lenovo Notebook and ThinkServer are both products of the Chinese company Lenovo. The former is a line of laptops and the latter is a line of servers. A local elevation of privilege vulnerability exists in the Lenovo Notebook and ThinkServer systems. An attacker could exploit this vulnerability to...

Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - Lenovo Support US

No description provided...

CVE-2016-8224: Undefined Security Weakness

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine ME protections. This could result in a denial of service or privilege escalation attack...

PT-2016-7471

Name of the Vulnerable Software and Affected Versions Lenovo Notebook and ThinkServer systems affected versions not specified Description A vulnerability has been identified where an attacker with administrative privileges could install a program that circumvents Intel Management Engine ME...

HPSBHF3549 rev.2 - ThinkPwn UEFI BIOS SmmRuntime Escalation of Privilege

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: Dmytro Oleksiuk VULNERABILITY SUMMARY A security vulnerability identified with UEFI firmware, dubbed ThinkPwn, has been addressed in certain HP commercial notebook PC...

SuperFish Vulnerability - Lenovo Support US

No description provided...

SuperFish Vulnerability

Lenovo Security Advisory: LEN-2015-010 Potential Impact: Man-in-the-Middle Attack Severity: High Summary: This advisory only applies to Lenovo Notebook products. ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted. SuperFish was previously...

Lenovo Accelerator Application Insecure Update Mechanism

Lenovo Security Advisory: LEN-6718 Potential Impact: Remote code execution by an attacker with local network access Severity: High Scope of Impact: Lenovo products described below Summary Description: A vulnerability was identified in the Lenovo Accelerator Application software which could lead t...

Lenovo Service Engine (LSE) BIOS for Notebook - Lenovo Support US

No description provided...

Notebook for Cluedo - Corrupted files, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Notebook for Cluedo published at the 'play' market has multiple vulnerabilities...

Notebook - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Notebook published at the 'play' market has multiple vulnerabilities...

IPython Notebook Arbitrary Code Execution Vulnerability

IPython NotebookIPython is an enhanced version of Python's native interactive shell developed by the IPython team, of which Notebook is a development environment. Arbitrary code execution vulnerability in IPython Notebook versions prior to 3.2.2 and Jupyter Notebook versions 4.0.x prior to 4.0.5...

CVE-2015-7337

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

PYSEC-2015-27

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...