2350 matches found
Security Bulletin: NVIDIA SHIELD TV Software Security Updates for Multiple Vulnerabilities
NVIDIA SHIELD TV vulnerabilities may lead to code execution, denial of service, escalation of privileges, or information disclosure Go to NVIDIA Product Security. Vulnerability Details This section summarizes the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow the CVS...
Lenovo System Update Buffer Overflow Vulnerability
Lenovo System Update is a set of automatic system update tools from the Chinese company Lenovo Lenovo, which includes device driver updates, Windows system patch updates and more. A buffer overflow vulnerability exists in MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe in versions prior t...
Design/Logic Flaw
MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...
CVE-2018-9063
MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...
CVE-2018-9063
MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...
CVE-2018-9063
MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...
CVE-2018-9063
MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...
CVE-2018-9063
CVE-2018-9063 affects Lenovo System Update’s MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe). Versions prior to 5.07.0072 contain a local buffer overflow by entering very large user ID or password, leading to undefined behavior and potential arbitrary code execution. The exploit is loca...
Buffer Overflow in Lenovo System Update Drive Mapping Utility - Lenovo Support US
No description provided...
[SECURITY] [DLA 1327-1] thunderbird security update
Package : thunderbird Version : 1:52.7.0-1deb7u1 CVE ID : CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5144 CVE-2018-5145 CVE-2018-5146 Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. Fo...
Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities
NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...
[SECURITY] [DLA 1265-1] krb5 security update
Package : krb5 Version : 1.10.1+dfsg-5+deb7u9 CVE ID : CVE-2013-1418 CVE-2014-5351 CVE-2014-5353 CVE-2014-5355 CVE-2016-3119 CVE-2016-3120 Debian Bug : 728845 762479 773226 778647 819468 832572 Kerberos, a system for authenticating users and services on a network, was affected by several...
Security Bulletin: NVIDIA SHIELD TV Security Updates for CPU Speculative Side Channel Vulnerabilities
NVIDIA SHIELD TV Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of novel information disclosure attacks...
HPSBHF03573 rev. 15 - Side-Channel Analysis Method
Potential Security Impact Elevation of Privilege/Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Google Project Zero VULNERABILITY SUMMARY An industry-wide vulnerability, known as side channel analysis method, has been disclosed with modern CPUs using...
[SECURITY] [DLA 1212-1] otrs2 security update
Package : otrs2 Version : 3.3.18-1deb7u2 CVE ID : CVE-2017-15864 CVE-2017-16664 CVE-2017-16854 CVE-2017-16921 Four vulnerabilities were discovered in the Open Ticket Request System which could result in information disclosure or the execution of arbitrary shell commands by logged-in agents. For...
Design/Logic Flaw
Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...
CVE-2015-6971
Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...
CVE-2015-6971
Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...
CVE-2015-6971
Summary of CVE-2015-6971 : Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows a local attacker to submit commands to the SUService.exe and escalate privileges by launching signed Lenovo executables. The root cause is flaws in the security token authentication proce...