CVE-2022-31228

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

CVE-2022-31228

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

Unbreakable Enterprise kernel security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

x2-ethreum.org Cross Site Scripting vulnerability OBB-2410603

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

Design/Logic Flaw

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The CVE-2021-3146 issue affects Dolby Audio X2 (DAX2) API service on Windows, where versions prior to 0.8.8.90 allow local users to gain privileges due to a code issue in the API service. Affected component: Dolby DAX2 API service; root cause described as a code issue in DAX2 prior to 0.8.8.90. I...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

x2.kegu.site Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-969837 Security Researcher devl00p Helped patch 3000 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting x2.kegu.site website and...

Philips IntelliVue WLAN

1. EXECUTIVE SUMMARY CVSS v3 6.4 Vendor: Philips Equipment: IntelliVue M3002A X2 MMS Transport Monitor/Module and IntelliVue MP monitors MP2/X2, MP5, MP20-MP90, MX600, MX700 and MX800 Vulnerabilities: Use of Hard-coded Password, Download of Code Without Integrity Check 2. RISK EVALUATION...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Nvidia Tegra_Bootrom_Rcm

This is a proof-of-concept arbitrary code loader for Tegra processors, which takes advantage of CVE-2018-6242 "Fusée Gelée" to gain arbitrary code execution and load small payloads over USB. The vulnerability is documented in the 'report' subfolder, and more details and guides are to follow. The...

HPSBHF03568 rev. 11 - Infineon TPM Security Update

Potential Security Impact Potential loss of confidentiality Source: Infineon VULNERABILITY SUMMARY A security vulnerability was identified in the RSA key generation method used by TPM products listed below. This leaves the keys potentially vulnerable via targeted, computationally expensive attack...

CVE-2017-2153

SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets...

CVE-2017-7293

The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to get arbitrary system privileges, because these services have .NET code for DCOM. This affects Dolby Audio X2 DAX2 1.0, 1.0.1, 1.1, 1.1.1, 1.2, 1.3, 1.3.1, 1.3.2, 1.4, 1.4.1,...

CVE-2017-7293

The CVE-2017-7293 entry concerns a privilege-escalation in the Dolby DAX2/DAX3 API services. The issue stems from using .NET code for DCOM, enabling a normal user to gain system privileges. Affected products include Dolby Audio X2 (versions 1.0–1.4.4) and DAX3 (1.0–1.1), with Realtek/Lenovo-refer...

Windows 10 Realtek Audio Driver 6.0.1.7898 - Dolby Audio X2 Service Privilege Escalation Vulnerabili

The DAX2API service installed as part of the Realtek Audio Driver on Windows 10 is vulnerable to a privilege escalation vulnerability which allows a normal user to get arbitrary system privileges. Windows: Dolby Audio X2 Service EoP CVE-2017-7293 Windows: Dolby Audio X2 Service Elevation of...

Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1075 Windows: Dolby Audio X2 Service Elevation of Privilege Platform: Windows 10 + Realtek Audio Driver version 6.0.1.7898 on a Lenovo P50. Version of the service binary 0.7.2.61 built on 7/18/2016. Class: Elevation of Privilege...

Dolby Audio X2 elevation of privilege vulnerability in multiple Lenovo products

An elevation of privilege vulnerability exists in multiple Lenovo products Dolby Audio X2. A local attacker can exploit the vulnerability to run files with system privileges...