2445 matches found
CVE-2015-7335
The CVE-2015-7335 entry concerns a race condition in Lenovo System Update (ThinkVantage System Update) that could allow local privilege escalation on affected systems. Technical details across connected records indicate impact on Lenovo System Update versions up to 5.07.0008 and earlier, enabling...
PT-2020-7878
Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A local privilege escalation issue was reported in Lenovo System Update, where the SUService.exe /type INF and INF BY COMPATIBLE ID command types could allow a user to execute...
PT-2020-7879
Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A local privilege escalation issue was reported in Lenovo System Update, where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated...
PT-2020-7880
Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A race condition was reported in Lenovo System Update that could allow a user to execute arbitrary code with elevated privileges. The issue was fixed and publicly disclosed in 201...
PT-2020-7881
Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A vulnerability was reported in Lenovo System Update that could allow the signature check of an update to be bypassed. This issue was fixed and publicly disclosed in 2015...
CVE-2015-7335: Concurrent Execution using Shared Resource with Improper Synchronization
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges...
CVE-2015-7336: Improper Verification of Cryptographic Signature
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...
CVE-2015-7333: Improper Privilege Management
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INFBYCOMPATIBLEID command type...
CVE-2015-7334: Improper Privilege Management
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to...
[SECURITY] [DLA 2131-2] rrdtool regression update
Package : rrdtool Version : 1.4.8-1.2+deb8u2 CVE ID : CVE-2014-6262 Debian Bug : 952958 It was discovered that there was a regression in a previous fix, which resulted in the following error: ERROR: cannot compile regular expression: Error while compiling regular expression ^?:^%+|%%%+-...
Important: qemu
Issue Overview: ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 Affected Packages: qemu Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...
Medium: clamav
Issue Overview: A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routine...
CVE-2019-7193
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...
CVE-2019-7193
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
DLL Search Path and Symbolic Link Vulnerabilities - Lenovo Support US
No description provided...
The Pirate Bay was recently down for over a week due to a DDoS attack
It seems like the prolonged downtime and technical difficulties faced by The Pirate Bay over the past several weeks were due to a series of distributed denial of service DDoS attacks against the widely-popular torrent website by malicious actors. For those unaware, The Pirate Bay was down for mor...
Security Bulletin: NVIDIA SHIELD TV - October 2019
NVIDIA has released a software security update for NVIDIA SHIELD® TV. This update addresses issues that may lead to information disclosure, denial of service, code execution, or escalation of privileges. To protect your system, download and install this software update through Settings About Syst...
iPhone BootROM vulnerability description and threat assessment-vulnerability warning-the black bar safety net
0x00-related vocabulary AP: application processor. SEP: security coprocessor. SecureROM: also known as the BootROM is cured in the iPhone the read-only area in the section of the code, the area code is to start the chain and start the chain of trust starting point, the main responsible for loadin...
