lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
Component: system_interface_foundation

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could a...

📅 2020-04-14
CVSS 7.3 Dossier →
CVE-2020-8316 MEDIUM
Component: vantage

A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to read files on the system with e...

📅 2020-04-14
CVSS 4.4 Dossier →
Component: solution_center

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered (fixed and publicly disclosed in 20...

📅 2020-03-27
CVSS 8.8 Dossier →
Component: solution_center

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered (fixed and publ...

📅 2020-03-27
CVSS 7.8 Dossier →
Component: solution_center

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered (fixed a...

📅 2020-03-27
CVSS 7.8 Dossier →
Component: system_update

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015...

📅 2020-03-27
CVSS 7.5 Dossier →
Component: system_update

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed and publicly disclosed in 201...

📅 2020-03-27
CVSS 7.0 Dossier →
Component: system_update

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and...

📅 2020-03-27
CVSS 7.8 Dossier →
Component: system_update

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and...

📅 2020-03-27
CVSS 7.8 Dossier →
CVE-2015-5684 CRITICAL
Component: b50-10_firmware

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly ...

📅 2020-03-27
CVSS 9.8 Dossier →
Component: xclarity_administrator

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of manage...

📅 2020-03-13
CVSS 7.9 Dossier →
CVE-2019-6195 MEDIUM
Component: xclarity_controller

An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authentica...

📅 2020-02-14
CVSS 4.8 Dossier →
CVE-2019-6194 MEDIUM
Component: xclarity_administrator

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow in...

📅 2020-02-14
CVSS 5.7 Dossier →
Component: xclarity_administrator

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated ...

📅 2020-02-14
CVSS 7.5 Dossier →
CVE-2019-6190 MEDIUM
Component: thinkcentre_e93_firmware

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and T...

📅 2020-02-14
CVSS 5.0 Dossier →
Component: ez_media_\&_backup_center_ix2_firmware

A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, ...

📅 2020-02-14
CVSS 6.1 Dossier →
Component: xclarity_administrator

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnera...

📅 2020-02-14
CVSS 5.4 Dossier →
CVE-2019-6192 MEDIUM
Component: power_management_driver

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could ca...

📅 2019-12-10
CVSS 4.4 Dossier →
Component: energy_management

A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause sy...

📅 2019-12-10
CVSS 7.5 Dossier →
Component: paper

A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation....

📅 2019-11-20
CVSS 7.8 Dossier →
Component: system_interface_foundation

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load...

📅 2019-11-20
CVSS 7.8 Dossier →
CVE-2019-6187 MEDIUM
Component: xclarity_controller

A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permis...

📅 2019-11-20
CVSS 6.5 Dossier →
Component: system_interface_foundation

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execu...

📅 2019-11-20
CVSS 8.8 Dossier →
Component: customer_engagement_service

A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation....

📅 2019-11-20
CVSS 7.8 Dossier →
Page 10 of 16 (374 Total Records)