935 matches found
CVE-2020-10564
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfuincludelib call...
Directory traversal
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfuincludelib call...
CVE-2009-5159
Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...
CVE-2009-5159
Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...
CVE-2009-5159
Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...
PT-2020-7071
Name of the Vulnerable Software and Affected Versions Invision Power Board aka IPB or IP.Board versions 2.x through 3.0.4 Description The issue allows for cross-site scripting XSS via a .txt attachment when Internet Explorer 5 is used. Recommendations For Invision Power Board aka IPB or IP.Board...
CVE-2009-5159: Improper Neutralization of Input During Web Page Generation
Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...
Denial of service
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...
CVE-2019-6190: Improper Initialization
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...
PT-2020-11195
Name of the Vulnerable Software and Affected Versions Lenovo Desktop, Desktop - All in One, and ThinkStation BIOS affected versions not specified Description A potential denial of service issue affects various versions of BIOS for Lenovo products, including Desktop, Desktop - All in One, and...
Multi-Vendor Desktop & WorkStation BIOS Security Vulnerabilities - Lenovo Support US
No description provided...
Multi-Vendor Desktop & WorkStation BIOS Security Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-28078 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-6190 Summary Description: When possible, Lenovo consolidates multiple BIOS security fixes and enhancement...
2019.2 IPU – Intel® TXT Advisory
Summary: A potential security vulnerability in Intel® Trusted Execution Technology TXT with Intel® Processor Graphics may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0184 Description: Insufficie...
CVE-2019-0151
Insufficient memory protection in IntelR TXT for certain IntelR Core Processors and IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2019-0184
Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...
CVE-2019-0124
Insufficient memory protection in IntelR 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Insufficient memory protection in IntelR TXT for certain IntelR Core Processors and IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
Improper access control
Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...
CVE-2019-0184
Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...
CVE-2019-0184
CVE-2019-0184 concerns Intel TXT: Insufficient access control in the protected memory subsystem that could allow a privileged user to disclose information via local access. Affected are 6th–9th Gen Intel Core, Xeon E3-1500 v5/v6, and Xeon E-2100/E-2200 families with Intel Processor Graphics and T...