113 matches found
Microsoft Windows Text Service Framework CVE-2019-1235 Local Privilege Escalation Vulnerability
Description Microsoft Windows Text Service Framework is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
KB4516062: Windows Server 2012 September 2019 Security Update
The remote Windows host is missing security update 4516062 or cumulative update 4516055. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...
KB4516068: Windows 10 Version 1703 September 2019 Security Update
The remote Windows host is missing security update 4516068. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...
KB4516058: Windows 10 Version 1803 September 2019 Security Update
The remote Windows host is missing security update 4516058. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...
KB4516033: Windows 7 and Windows Server 2008 R2 September 2019 Security Update
The remote Windows host is missing security update 4516033 or cumulative update 4516065. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an...
CVE-2017-11564
The CVE-2017-11564 entry concerns the D-Link EyeOn Baby Monitor (DCS-825L) running 1.08.1, which has multiple command-injection vulnerabilities in its web service framework. The issue allows an attacker to forge crafted HTTP requests to execute commands, with authentication required before the at...
The vulnerability of the Lenovo Service Framework (LSF) processing push notifications lies in the lack of measures to clean up special elements used in the command line. This allows a perpetrator to execute arbitrary commands or run arbitrary code.
The vulnerability of the Lenovo Service Framework LSF software for processing push notifications on devices running the Android operating system is related to the lack of measures to clean up special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute...
Lenovo Service Framework Android Remote Code Execution Vulnerability
Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly...
Lenovo Service Framework Application Android Component Access Control Error Vulnerability
Lenovo Service Framework application is a Lenovo product-specific framework from Lenovo, China.Android components is one of the Android components. An access control error vulnerability exists in the Android component of the Lenovo Service Framework application. A remote attacker could exploit th...
Lenovo Service Framework Android Code Execution Vulnerability (CNVD-2017-32910)
Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly filt...
Lenovo Service Framework Android Code Execution Vulnerability
Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program using an insecure set of...
Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - Lenovo Support US
No description provided...
Improper access control
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...
Remote code execution
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...
CVE-2017-3760
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...
CVE-2017-3759
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...
Command injection
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...
CVE-2017-3761
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...
