Skip to contentLenovo vulnerabilities
Products
Show 140 moreShow less
Newest
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 moreIomega and LenovoEMC NAS Web UI VulnerabilitiesCVE-2018-90768.1 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 moreIomega and LenovoEMC NAS Web UI VulnerabilitiesCVE-2018-9075Public exploit8.1 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 moreIomega and LenovoEMC NAS Web UI VulnerabilitiesCVE-2018-90746.5 Medium
- intel core i3, core i5, core i7 +29 more +31 morePlatform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...CVE-2018-121697.6 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can,...CVE-2018-90668.8 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to...CVE-2018-90657.5 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may...CVE-2018-90648.8 High
- ibm bladecenter hs22 firmware, bladecenter hs23 firmware, bladecenter hs23e firmware +35 more +37 moreThe IMM2 First Failure Data Capture function collects management module logs and diagnostic...CVE-2018-90687.5 High
- lenovo e42-80 firmware, e42-80 isk firmware, e52-80 firmware +37 more +39 moreBIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical AttackCVE-2018-90626.8 Medium
- lenovo smart assistantFor the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with...CVE-2018-90706.4 Medium
- lenovo help, lenovo group ltd. help android application +1 moreThe Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for...CVE-2018-90677.5 High
- lenovo system updateMapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions...CVE-2018-90637.8 High
- lenovo flex system x240 m5 bios, flex system x280 x6 bios, flex system x480 x6 bios +9 more +11 moreSome Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system...CVE-2017-37756.4 Medium
- openslp, canonical ubuntu linux, debian linux +35 more +37 moreOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue...CVE-2017-17833Fix available9.8 Critical
- lenovo help, lenovo group ltd. help mobile android app +1 moreLenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be...CVE-2017-37767.5 High
- ibm imm2, lenovo integrated management module 2 +1 moreA stack overflow vulnerability was discovered within the web administration service in Integrated...CVE-2017-37749.8 Critical
- hewlett packard enterprise diagnosticsA cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.CVE-2016-85225.4 Medium
- hewlett packard enterprise diagnosticsA Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.CVE-2016-85216.5 Medium
- lenovo fingerprint manager proSensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including...CVE-2017-37627.8 High
- lenovo enterprise network operating system, lenovo group ltd. enterprise network operating system affecting lenovo and ibm rackswitch and bladecenter products +1 moreIn Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter...CVE-2017-37657.0 High
- lenovo xclarity administratorA vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA...CVE-2017-37645.3 Medium
- lenovo aio e95 firmware, thinkcentre m710s firmware, thinkcentre m710t firmware +1 more +3 moreSystem boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because...CVE-2017-37717.5 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application executes some system commands without proper...CVE-2017-37619.8 Critical
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application uses a set of nonsecure credentials when...CVE-2017-37608.1 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application accepts some responses from the server without...CVE-2017-37598.1 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreImproper access controls on several Android components in the Lenovo Service Framework...CVE-2017-37589.8 Critical
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to...CVE-2015-69717.8 High
- lenovo fingerprint managerServices and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows...CVE-2015-33216.7 Medium
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 morePrivilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated...CVE-2017-37708.8 High
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 moreAn attacker who obtains access to the location where the LXCA file system is stored may be able...CVE-2017-37636.7 Medium
- lenovo thinkpad usb 3.0 ethernet adapter driverThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to...CVE-2017-37467.8 High
- lenovo thinkpad 10 ella 2, thinkpad 10 ella 2 bios, thinkpad 11e beema +146 more +148 moreA privilege escalation vulnerability was identified in Lenovo Active Protection System for...CVE-2017-37567.8 High
- lenovo 63 firmware, h50-30g firmware, ideacentre 300-20ish firmware +109 more +111 moreA vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed...CVE-2017-37536.8 Medium
- lenovo thinkpad compact usb keyboard driver, lenovo group ltd. thinkpad compact usb keyboard with trackpoint driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB...CVE-2017-37517.8 High
- ibm 1\, 1g l2-7 slb, en2092 1gb firmware +17 more +19 moreAn industry-wide vulnerability has been identified in the implementation of the Open Shortest...CVE-2017-37528.2 High
- lenovo bios, lenovo group ltd. notebook bios +1 moreSome Lenovo brand notebook systems do not have write protections properly configured in the...CVE-2017-37546.7 Medium
- lenovo connect2In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when...CVE-2017-37424.8 Medium
- lenovo nerve centerPrivilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems ...CVE-2017-37475.5 Medium
- lenovo xclarity administratorIn Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a...CVE-2017-37457.8 High
- ibm integrated management module firmware, lenovo group ltd. system x imm2 +1 moreIn the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other...CVE-2017-37446.5 Medium
- lenovo advanced settings utility, updatexpress system pack installer, lenovo group ltd. toolscenter +1 more +3 moreIf multiple users are concurrently logged into a single system where one user is sending a...CVE-2017-37437.5 High
- lenovo mouse suiteLenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator...CVE-2015-45967.8 High
- lenovo power management driver, power management +1 moreIn the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's...CVE-2017-37413.3 Low
- lenovo active protection systemIn Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send...CVE-2017-37405.5 Medium
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the...CVE-2016-82317.5 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send...CVE-2016-82307.5 High
- lenovo service bridgeA cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be...CVE-2016-82298.8 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a user with local privileges on a system could execute...CVE-2016-82287.8 High
- lenovo solution centerThe backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local...CVE-2016-18767.8 High
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to...CVE-2015-81107.8 High
- Show moreLoading…