Skip to contentLenovo vulnerabilities
Products
Show 140 moreShow less
Newest
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to...CVE-2015-81097.0 High
- lenovo updatesRemote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle...CVE-2016-82378.1 High
- lenovo customer care software development kit, lenovo group ltd. customer care software development kit (ccsdk) +1 morePrivilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier...CVE-2016-82357.8 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0151EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0150EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0141EPSS 48.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0138EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0137EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0136EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0134EPSS 26.4%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0133EPSS 24.7%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0132EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0131EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0094EPSS 29.0%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0071EPSS 31.9%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0070Public exploitEPSS 76.7%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0067EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0035EPSS 15.2%7.5 High
- lenovo browser, microsoft edge, internet explorer +2 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via...CVE-2017-00334.3 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0032EPSS 15.2%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0015EPSS 26.4%7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...CVE-2017-0010EPSS 24.7%7.5 High
- lenovo browser, microsoft internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information...CVE-2017-0009EPSS 36.5%4.3 Medium
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 moreApache Struts vulnerable to remote arbitrary command execution due to improper input validationCVE-2017-5638In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- lenovo thinkserver firmware, lenovo group ltd. thinkserver rd350, rd450, rd550, rd650, td350 +1 moreReset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350...CVE-2016-82367.5 High
- lenovo xclarity administratorLog files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may...CVE-2016-82339.8 Critical
- lenovo transition, lenovo group ltd. transition application +1 morePrivilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and...CVE-2016-82277.8 High
- lenovo flex system x240 m5 bios, flex system x280 m6 bios, flex system x480 x6 bios +9 more +11 moreThe BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of...CVE-2016-82264.9 Medium
- lenovo slim usb keyboard driver, edge keyboard driver, lenovo group ltd. edge and slim usb keyboard driver +2 moreUnquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions...CVE-2016-82257.8 High
- lenovo xclarity administrator, xclarity administrator (lxca) +1 morePrivilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to...CVE-2016-82217.0 High
- hp ethernet 10gb 2-port 562flr-sfp\+, ethernet 10gb 2-port 562sfp\+, ethernet 10gb 4-port 563sfp\+ +26 more +28 moreA Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images...CVE-2016-81065.9 Medium
- lenovo group ltd. thinkpad systems, lenovo thinkpad 10 ella 2 bios, thinkpad 11e beema bios +72 more +74 moreA vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad...CVE-2016-82224.4 Medium
- lenovo bios, notebook 110 14ibr bios, notebook 110 15ibr bios +27 more +29 moreA vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...CVE-2016-82244.4 Medium
- lenovo system interface foundation, lenovo group ltd. all thinkpad, thinkcentre, thinkstation and lenovo-branded systems preloaded with the windows 10 operating system, or any system running lenovo companion, lenovo settings, or lenovo id. +1 moreDuring an internal security review, Lenovo identified a local privilege escalation vulnerability...CVE-2016-82237.8 High
- lenovo biosThe BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s...CVE-2016-52477.8 High
- amazonbasics firmware, dell km632 firmware, km714 firmware +2 more +4 moreThe firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless,...CVE-2016-62576.5 Medium
- lenovo bios efi driverLenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System...CVE-2016-57298.2 High
- lenovo solution centerLenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with...CVE-2016-52497.8 High
- lenovo solution centerThe StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003...CVE-2016-52485.5 Medium
- lenovo accelerator applicationUpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute...CVE-2016-39447.5 High
- lenovo shareitCross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4...CVE-2016-47836.1 Medium
- lenovo shareitLenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified...CVE-2016-47828.8 High
- lenovo fingerprint manager, touch fingerprint +1 moreLenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for...CVE-2016-23937.8 High
- lenovo emc firmwareThe management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r...CVE-2015-81085.3 Medium
- cisco ios xe, lenovo thinkcentre e75s firmware, samsung x14j firmware +3 more +5 moreCisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager...CVE-2016-13507.5 High
- cisco ios xe, lenovo thinkcentre e75s firmware, netgear jr6150 firmware +4 more +6 moreThe IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote...CVE-2016-13445.9 Medium
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files...CVE-2016-14926.1 Medium
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files,...CVE-2016-14918.8 High
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain...CVE-2016-14904.1 Medium
- lenovo shareitLenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files...CVE-2016-14898.0 High
- Show moreLoading…