2830 matches found
PT-2025-23338
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Description An untrusted search path issue in Lenovo PC Manager could allow a local attacker to elevate privileges. Recommendations At the moment, there is no information about a newer version...
CVE-2025-2501: Untrusted Search Path
An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges...
Lenovo PC Manager 安全漏洞
Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager that stems from improper default permissions, which may result in elevated privileges...
PT-2025-23340
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Description An improper permission handling issue was reported that could allow a local attacker to perform arbitrary file deletions as an elevated user. Recommendations At the moment, there is...
CVE-2025-2502: Incorrect Default Permissions
An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges...
PT-2025-23339
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Description An improper default permissions issue was reported that could allow a local attacker to elevate privileges. Recommendations At the moment, there is no information about a newer...
CVE-2025-2503: Incorrect Permission Assignment for Critical Resource
An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...
Tcman Gim SQL注入漏洞
Tcman Gim is a facility management software from the Spanish company Tcman designed for use on mobile devices. A SQL injection vulnerability exists in Tcman Gim version v11, which stems from an incorrect manipulation of the parameter ArbolID in the file /GIMWeb/PC/frmCorrectivosList.aspx resultin...
CVE-2025-40666: Improper Neutralization of Special Elements used in an SQL Command
Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx...
CVE-2024-4143
A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released firmware updates to mitigate this vulnerability...
CVE-2023-22336
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilitie...
CVE-2023-22335
Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with...
CVE-2023-26300
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability...
CVE-2023-6533
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...
CVE-2023-5410
A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation for the potential vulnerability...
CVE-2023-32674
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...
CVE-2023-32673
Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...
CVE-2023-30673
Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.230521 allows local attackers to delete arbitrary directory using directory junction...
CVE-2023-25011
PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...