Skip to contentLenovo vulnerabilities
Products
Show 140 moreShow less
Newest
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated user may be able to trigger a denial of service of the XCC web user...CVE-2023-254926.3 Medium
- lenovo smart clock essential with alexa built in, smart clock essential with alexa built in firmware +1 moreA default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could...CVE-2023-08968.8 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated administrative user can query a web interface API to reveal the configured...CVE-2023-254954.9 Medium
- lenovo drivers managementA privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver...CVE-2023-254967.8 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid LDAP user, under specific conditions, will default to read-only permissions when...CVE-2023-290565.3 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid XCC user's local account permissions overrides their active directory permissions under...CVE-2023-290577.3 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read-only permissions can modify custom user roles on other...CVE-2023-290586.4 Medium
- lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreThe Remote Mount feature can potentially be abused by valid, authenticated users to make...CVE-2022-348882.7 Low
- lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreA buffer overflow exists in the Remote Presence subsystem which can potentially allow valid,...CVE-2022-348847.2 High
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +285 more +287 moreA buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local...CVE-2022-401376.7 Medium
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +145 more +147 moreAn information leak vulnerability in SMI Handler used to configure platform settings over WMI in...CVE-2022-401364.4 Medium
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +134 more +136 moreAn information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models...CVE-2022-401354.4 Medium
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +323 more +325 moreAn information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models...CVE-2022-401344.4 Medium
- lenovo safecenterA denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a...CVE-2022-48166.2 Medium
- lenovo bios, ideapad y700-14isk firmware +1 moreA potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK...CVE-2022-34326.7 Medium
- lenovo bios, d330-10igl firmware, ideapad 5 pro 16arh7 firmware +42 more +44 moreA potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...CVE-2022-34306.7 Medium
- lenovo 100e 2nd gen firmware, 100w gen 3 firmware, 13w yoga firmware +68 more +70 moreA buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...CVE-2022-18926.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow...CVE-2022-18916.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an...CVE-2022-18906.7 Medium
- lenovo leyunAn incorrect default permissions vulnerability in Lenovo Leyun cloud music application could...CVE-2022-11095.5 Medium
- dell bios, edge gateway 3000 firmware, edge gateway 5000 firmware +1 more +3 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...CVE-2022-324907.5 High
- dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 morePrior Dell BIOS versions contain an improper input validation vulnerability. A local...CVE-2022-344607.5 High
- dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...CVE-2022-343937.5 High
- lenovo thinkpad x13s, thinkpad x13s firmware +1 moreA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS...CVE-2022-44356.7 Medium
- lenovo thinkpad x13s, thinkpad x13s firmware +1 moreA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a...CVE-2022-44346.7 Medium
- lenovo thinkpad x13s, thinkpad x13s firmware +1 moreA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe...CVE-2022-44336.7 Medium
- lenovo thinkpad x13s, thinkpad x13s firmware +1 moreA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe...CVE-2022-44326.7 Medium
- lenovo aio300-23isu firmware, aio310-20iap firmware, aio510-22ish firmware +133 more +135 moreRealtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and...CVE-2019-197057.8 High
- lenovo elan miniport touchpad driverELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple...CVE-2021-42205Public exploit4.7 Medium
- honor pcmanagerA potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may...CVE-2022-15137.3 High
- lenovo smart standby driverA buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could...CVE-2022-11105.5 Medium
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that...CVE-2021-428528.0 High
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an...CVE-2021-428516.3 Medium
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default administrator password for the web interface and serial port was reported in some...CVE-2021-428508.8 High
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default password for the serial port was reported in some Lenovo Personal Cloud Storage...CVE-2021-428496.8 Medium
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreAn information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage...CVE-2021-428484.3 Medium
- lenovo imcontroller, system interface foundation +1 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software...CVE-2021-39697.8 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreA read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of...CVE-2021-39564.3 Medium
- lenovo imcontroller, system interface foundation +1 moreA race condition vulnerability was reported in IMController, a software component of Lenovo...CVE-2021-39227.8 High
- lenovo fan power controller2 (fpc2), system management module (smm), ibm nextscale fan power controller firmware +4 more +6 moreAn authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan...CVE-2021-38979.8 Critical
- lenovo fan power controller2 (fpc2), system management module (smm), ibm nextscale fan power controller firmware +4 more +6 moreAn authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan...CVE-2021-38499.8 Critical
- lenovo thinkpad bios, thinkpad x1 fold gen 1 firmware +1 moreA potential vulnerability due to improper buffer validation in the SMI handler...CVE-2022-11086.7 Medium
- lenovo thinkpad bios, thinkpad 11e firmware, thinkpad 11e yoga firmware +28 more +30 moreA potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some...CVE-2022-11076.7 Medium
- lenovo thin installerA denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039...CVE-2022-06365.0 Medium
- dell system updateA vulnerability was reported in Lenovo System Update that could allow a local user with...CVE-2022-03547.3 High
- honor pcmanagerA DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175...CVE-2022-01927.3 High
- lenovo bios, c340-14iml firmware, c340-15iml firmware +60 more +62 moreA potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in...CVE-2021-42126.7 Medium
- lenovo bios, a340-22icb firmware, a340-22ick firmware +51 more +53 moreA potential vulnerability in the SMI callback function used in the SMBIOS event log driver in...CVE-2021-42116.7 Medium
- lenovo a540-24icb firmware, a540-27icb firmware, bios +30 more +32 moreA potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo...CVE-2021-42106.7 Medium
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability by a driver used during manufacturing process on some consumer Lenovo...CVE-2021-3972Public exploit6.7 Medium
- Show moreLoading…