PT-2023-23937 · Intel · Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software versions prior to 1.79.1.1 Description: The issue is related to an unquoted search path in the HDMI firmware update tool software, which may allow an authenticate...

PT-2023-23940 · Intel · Intel Nuc Kit Nuc6I7Kyk Thunderbolt 3 Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool versions prior to 46 Description: The issue is related to an uncontrolled search path in the installation software of the IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update...

Multi-vendor BIOS Security Vulnerabilities (October 2023) - Lenovo Support US

No description provided...

Hyper Bump It Path Traversal Vulnerability

Hyper Bump It is a command line tool used to update the version in the project file required for the next release. A path traversal vulnerability exists in versions of Hyper Bump It prior to 0.5.1, which stems from not checking files in the project root directory...

CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

CVE-2022-4569

The CVE-2022-4569 entry concerns Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool. Affected component is the firmware update tool; root cause is insufficient input validation within the tool, enabling a local attacker to execute code with elevated privileges during a package upgr...

CVE-2022-21162

Uncontrolled search path for the IntelR HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40971

The Intel HDMI Firmware Update Tool for NUC is affected by CVE-2022-40971 due to incorrect default permissions, enabling an authenticated local user to potentially escalate privileges. Affected versions are prior to 1.79.1.1. Intel’s advisory and Red Hat/CVE records indicate remediation by updati...

Intel HDMI Firmware Update Tool 代码问题漏洞

Intel HDMI Firmware Update Tool is a firmware update tool from Intel Corporation USA. A security vulnerability exists in the Intel HDMI Firmware Update Tool prior to version 1.79.1.1, which stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

PT-2023-13904 · Intel · Intel Nuc Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR HDMI Firmware Update Tool for NUC versions prior to 1.79.1.1 Description: The issue is related to incorrect default permissions that may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-3168 · Lenovo · Thinkpad Hybrid Usb-C With Usb-A Dock

Name of the Vulnerable Software and Affected Versions: ThinkPad Hybrid USB-C with USB-A Dock affected versions not specified Description: The issue is related to insufficient input validation in the firmware update tool, which could allow an attacker with local access to execute code with elevate...

Intel DSA 安全漏洞

Intel DSA is a driver update tool. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must. A security vulnerability exists in Intel DSA versions prior to 22.4.26, which ste...

Intel DSA 竞争条件问题漏洞

Intel DSA is a driver update tool. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i-card users must have. A security vulnerability exists in the Intel DSA version before 22.4.26. An...

CVE-2022-26024

Improper access control in the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC HDMI Firmware Update Tool that stems from improper access control and could allow an authenticated user to potentially achieve privilege escalation via local access...

Security Bulletin: IBM Sterling Configure Price Quote - Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability Content VULNERABILITY DETAILS: CVE ID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

Security Bulletin: IBM WebSphere Process Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

Security Bulletin: IBM Tivoli Security Policy Manager (TSPM) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TSPM contains a security vulnerability. The vulnerability allows an attacker to craft a malicious lin...

Security Bulletin: IBM Tivoli Access Manager for e-business (TAMeb) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TAMeb contains a security vulnerability. The vulnerability allows an attacker to craft a malicious li...

Intel DSA 安全漏洞

Intel DSA is a driver update tool. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must. A security vulnerability exists in Intel DSA versions prior to 22.2.14, which ste...