437 matches found
Denial of service
A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...
CVE-2022-0636
A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...
CVE-2022-0636
The CVE-2022-0636 issue affects Lenovo Thin Installer prior to 1.3.0039, where an input validation weakness can trigger a denial-of-service resulting in a system crash. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists) with consistent description; no exploit detai...
CVE-2022-0636: Buffer Copy without Checking Size of Input
A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...
CVE-2022-25226: Undefined Security Weakness
ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the serve...
The vulnerability in the optimization application for Lenovo Thin Installer, related to insufficient protection of service data, allows a malicious actor to trigger a service failure.
The vulnerability of the optimization application for Lenovo Thin Installer is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to cause service failures...
Lenovo Thin Installer 输入验证错误漏洞
Lenovo Thin Installer is an installer from CHN Lenovo Lenovo. for use with Update Retriever to pull driver, software, and system updates from a customized update repository in the cloud or on the network. Lenovo Thin Installer suffers from an input validation error vulnerability that stems from a...
PT-2022-2080
Name of the Vulnerable Software and Affected Versions Lenovo Thin Installer versions prior to 1.3.0039 Description The issue is related to insufficient protection of internal data in the Lenovo Thin Installer application, which is used for optimizing update procedures. This can lead to a denial o...
Lenovo Thin Installer Denial of Service Vulnerability - Lenovo Support US
No description provided...
Dell Wyse Device Agent 信息泄露漏洞
Wyse Device Agent is a unified agent for all thin client management solutions from Dell, U.S.A. Wyse Device Agent is vulnerable to an information disclosure vulnerability due to excessive data exported by the application. An attacker could exploit the vulnerability to access potentially sensitive...
Dell Wyse Device Agent信息泄露漏洞
Wyse Device Agent is a unified agent for all thin client management solutions from Dell USA. An information disclosure vulnerability exists in Wyse Device Agent that allows local users to access potentially sensitive information...
The vulnerability of the `salt.utils.thin.gen_thin()` function in the configuration management system and remote execution of SaltStack Salt operations allows a attacker to execute arbitrary commands on the target system.
The vulnerability of the salt.utils.thin.genthin function in the configuration management system and for remote execution of SaltStack Salt is related to insufficient validation of arguments passed in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
Logic Flaw Vulnerability in Ascend Cloud Terminal Management System
Ltd. hereinafter referred to as "Shengteng Information" is the earliest enterprise engaged in the research and development, production and sales of thin clients in China, and the industry's leading terminal equipment manufacturer. A logic flaw exists in the Shengteng cloud terminal management...
PYSEC-2021-55
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py...
UBUNTU-CVE-2021-3148
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py...
CVE-2021-3148
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py...
Recommended configurations for Linux Thin Client when experiencing audio delays
Experiencing audio delays when using a Linux based thin client with a IP phone applications for example using Avaya...
Wyse Management Suite Cross-Site Scripting Vulnerability (CNVD-2021-02365)
Wyse Management Suite is a next-generation management solution that enables you to centrally configure, monitor, manage and optimize Wyse thin clients. A stored cross-site scripting vulnerability exists in versions prior to Wyse Management Suite 3.1. An attacker could exploit this vulnerability t...
CVE-2020-29491
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...
CVE-2020-29491
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...