Intel® Thunderbolt™ non-DCH Driver for Windows Advisory

Summary: A potential security vulnerability in the Intel® Thunderbolt™ non-DCH Declarative Componentized Hardware driver for Windows may allow escalation of privilege. Intel is releasing software updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details:...

CVE-2021-33089

Improper access control in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33089

Improper access control in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33089

CVE-2021-33089 affects the Intel NUC HDMI Firmware Update Tool for NUC8i3BE/NUC8i5BE/NUC8i7BE. The root cause is improper access control in the software installer, which may allow an authenticated local user to escalate privileges. Impact is described as privilege escalation with high confidentia...

Intel NUC 授权问题漏洞

The Intel NUC is a small mini computer from Intel USA. An authorization issue vulnerability exists in the Intel NUC HDMI Firmware Update Tool, which originates from a privilege management error in the product's installer. An attacker could cause privilege escalation through this vulnerability...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC HDMI Firmware Update Tool that allows privileged escalation. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:CVEID: cve - 201 -0096...

Pengutronix RAUC Security Vulnerability

Pengutronix RAUC is a software from the Pengutronix organization that provides automatic updates for embedded Linux systems. A security vulnerability exists in Pengutronix RAUC update, which stems from a time-of-use check vulnerability in the install.c module that verifies the signature of an...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

Denial of Service Vulnerability in IObit DriverBooster

IObitDriverBooster is an effective and simple driver update tool, which is a driver management software from IObit. A denial of service vulnerability exists in IObit DriverBooster, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the Cisco UCS Series C microprogramming software’s BIOS update tool allows a hacker to load a malicious software image onto a vulnerable device.

The vulnerability of the Cisco UCS Series C microprogramming software’s BIOS update tool is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to load the malicious software onto a vulnerable device...

eDeploy Code Issue Vulnerability

eDeploy is a configuration and update tool for Linux systems. A security vulnerability exists in eDeploy. An attacker could exploit the vulnerability to execute code...

CVE-2018-12158

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...

commandline package update tool zypper proxy certificate write log file vulnerability

commandline package update tool zypper is a commandline tool for updating zypper packages. A security vulnerability exists in commandline package update tool zypper, which originates when the program writes HTTP proxy credentials to the log. A local attacker can use this vulnerability to gain...

Red Hat eDeploy Arbitrary Code Execution Vulnerability

Red Hat eDeploy is an update configuration tool for Linux systems from Red Hat USA. A security vulnerability exists in Red Hat eDeploy. A remote attacker could exploit the vulnerability to execute arbitrary code...

JVN#05340816: Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries

Multiple installers of Toshiba memory card related software contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installe...

FreeBSD -- Multiple libarchive vulnerabilities

Problem Description: Flaws in libarchive's handling of symlinks and hard links allow overwriting files outside the extraction directory, or permission changes to a directory outside the extraction directory. Impact: An attacker who can control freebsd-update's or portsnap's input to tar1 can chan...

Samsung SW Update Tool Information Disclosure Vulnerability

Samsung SW Update Tool is a set of system update tools from Samsung South Korea. A remote information disclosure vulnerability exists in Samsung SW Update Tool version 2.2.5.16. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and obtain sensitive information...

Samsung SW Update Tool Security Bypass Vulnerability

Samsung SW Update Tool is a set of system update tools from Samsung South Korea. A security bypass vulnerability exists in Samsung SW Update Tool version 2.2.5.16. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Samsung Windows Laptop Owners Urged To Download Fix To MitM Vulnerability

Samsung laptop owners are being urged to update their Windows PCs after the discovery of a vulnerability that can allow remote attackers to download files onto a targeted system and gain complete control over the laptop. The flaw is tied to a feature called “Samsung SW Update Tool 2.2.5.16”...