5071 matches found
Firmware Authentication Bypass - US
Lenovo Security Advisory: LEN-23849 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: Intel has reported a potential security vulnerability allowing an attacker with physical access to bypass firmware authentication...
Firmware Authentication Bypass - Lenovo Support US
No description provided...
Microsoft Skype v8.34 Android - Authentication Bypass
Document Title: =============== Microsoft Skype v8.34 Android - Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2177 MSRC Bulletin: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622 Video:...
CVE-2018-20681
The CVE-2018-20681 entry concerns mate-screensaver before 1.20.2 in MATE Desktop Environment. The vulnerability allows physically proximate attackers to view the screen content of a screensaver-locked session and possibly control applications by unplugging/re-plugging or power-cycling external ou...
Skype for Android Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests. An attacker who successfully exploited this vulnerability could bypass Android's lockscreen and access a victim's personal information. To exploit the vulnerability, an...
Microsoft Skype for Android CVE-2019-0622 Local Privilege Escalation Vulnerability
Description Microsoft Skype for Android is prone to a local privilege-escalation vulnerability. An attacker with physical access can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Skype for Android 8.35 Recommendations Permit local access for trusted individuals...
CVE-2018-20342
The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...
Improper access control
The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...
CVE-2018-15776
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell...
CVE-2018-15776
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell...
Philips HealthSuite Health Android App
1. EXECUTIVE SUMMARY CVSS v3 3.5 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Philips HealthSuite Health Android App Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker with physical access to...
CVE-2018-15773
Dell Encryption formerly Dell Data Protection | Encryption v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of...
CVE-2018-19795
ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...
Default credentials
ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...
CVE-2018-19795
ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...
CVE-2018-19795
ChipsBank UMPTool stores passwords in NAND using a simple substitution cipher, enabling full device access if an attacker has physical access. The vulnerability arises from weak password handling (insecure storage of credentials) and grants high impact to confidentiality, integrity, and availabil...
Intel DCI Policy Update - US
Lenovo Security Advisory: LEN-23611 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3652 Summary Description: Intel is releasing Direct Connect Interface DCI policy update. Existing UEFI setting restrictions for...
Intel DCI Policy Update - Lenovo Support US
No description provided...
Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
Microsoft patched a zero-day vulnerability that enabled attackers to escalate privileges on targeted systems, which include Windows 7, Server 2008 and Server 2008 R2 systems. The vulnerability, rated important, was part of Microsoft’s Patch Tuesday November security bulletin, which included 62...
