PT-2021-5605

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.1.20.3 Description A race condition issue in the IMController component of Lenovo System Interface Foundation allows a local attacker to potentially elevate their privileges by connecting...

PT-2021-5593

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.1.20.3 Description The issue is caused by a Time of Check Time of Use TOCTOU situation, also described as a "ситуация гонки" or race condition, in the IMController component. This could...

[SECURITY] Fedora 34 Update: perl-Encode-3.12-460.fc34

The Encode module provides the interface between Perl strings and the rest of the system. Perl strings are sequences of characters...

Google Chrome File System API Bypass

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Google Chrome File System API Bypass

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

DEBIAN-CVE-2021-21141

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page...

Google Chrome Backlink Vulnerability

Google Chrome is a web browser from Google, Inc. in the United States. A backlink vulnerability previously existed in Google Chromium version 88.0.4324.96, which stemmed from the discovery of insufficient policy enforcement security in the program's file system API component...

PT-2020-18842

Name of the Vulnerable Software and Affected Versions BIG-IQ version 7.1.0 Description The issue arises when accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface, resulting in an error message due to a disabled Grafana reverse proxy in the web service...

Lenovo Vantage HardwareScan Plugin Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-44421 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8345 Summary Description: A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature...

Lenovo Vantage HardwareScan Plugin Vulnerability - Lenovo Support US

No description provided...

CVE-2020-8346

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

CVE-2020-8346

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

Denial of service

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

CVE-2020-8346: Incorrect Default Permissions

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations...

PT-2020-20113

Name of the Vulnerable Software and Affected Versions Lenovo Vantage versions prior to 1.1.19.5 Description A denial of service issue was reported in the Lenovo System Interface Foundation component. This could allow configuration files to be written to non-standard locations. Recommendations For...

Lenovo Vantage Vulnerability - Lenovo Support US

No description provided...

Unspecified Vulnerability in Lenovo System Interface Foundation

Lenovo System Interface Foundation is a set of software from Lenovo, a Chinese company, for communicating with hardware devices. An unspecified vulnerability exists in Lenovo System Interface Foundation. An attacker could use this vulnerability to elevate privileges and execute code...

Unspecified Vulnerability in Lenovo System Interface Foundation (CNVD-2020-27278)

Lenovo System Interface Foundation is a set of software from Lenovo, a Chinese company, for communicating with hardware devices. An unspecified vulnerability exists in Lenovo System Interface Foundation. An attacker could use this vulnerability to elevate privileges and execute code...

Lenovo System Interface Foundation Code Issue Vulnerability

Lenovo System Interface Foundation is a set of software from Lenovo, a Chinese company, for communicating with hardware devices. A code issue vulnerability exists in Lenovo System Interface Foundation. An attacker could use this vulnerability to elevate privileges and execute code...

Lenovo System Interface Foundation Input Validation Error Vulnerability

Lenovo System Interface Foundation is a set of software from Lenovo, a Chinese company, for communicating with hardware devices. An input validation error vulnerability exists in Lenovo System Interface Foundation. An attacker could exploit this vulnerability to execute an unsigned DLL file...