Vendor
Lenovo
474 known vulnerabilities.
Products
BIOS 32
Desktop BIOS 16
Vantage 15
PC Manager 15
XClarity Controller 12
App Store 11
Printers 11
Service Bridge 10
ThinkPad BIOS 10
XClarity Administrator (LXCA) 9
Lenovo XClarity Administrator 9
PCManager 9
XClarity Administrator 9
ThinkSystem SMM 9
Iomega StorCenter 9
LenovoEMC 9
EZ Media and Backup Center 9
Browser 7
ThinkPad 6
Baiying 5
System Update 5
HX5530 Appliance (ThinkAgile) XCC 5
HX7530 Appliance (ThinkAgile) XCC 5
ST250 V3 (ThinkSystem) XCC 5
VX3331 Certified Node (ThinkAgile) XCC 5
HX Enclosure Certified Node (ThinkAgile) XCC 5
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5
HX1320 Appliance (ThinkAgile) XCC 5
HX1321 Certified Node (ThinkAgile) XCC 5
HX1331 Certified Node (ThinkAgile) XCC 5
HX1520-R Appliance (ThinkAgile) XCC 5
HX1521-R Certified Node (ThinkAgile) XCC 5
HX2320-E Appliance (ThinkAgile) XCC 5
HX2321 Certified Node (ThinkAgile) XCC 5
HX2330 Appliance (ThinkAgile) XCC 5
HX2331 Certified Node (ThinkAgile) XCC 5
HX2720-E Appliance (ThinkAgile) XCC 5
HX3320 Appliance (ThinkAgile) XCC 5
HX3321 Certified Node (ThinkAgile) XCC 5
Idea Tab Pro (TB373FU) 5
223 results · Clear filters · Feed
-
Medium 6.7
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with …
-
Medium 5.3
A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLi…
-
Medium 6.7
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allo…
-
Medium 5.3
An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a…
-
Medium 4.4
An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could al…
-
Medium 6.8
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their…
-
Medium 4.7
A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could a…
-
Medium 4.7
A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a lo…
-
Medium 5.5
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning softwa…
-
Medium 6.7
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSy…
-
Medium 6.3
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LX…
-
Medium 4.3
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface witho…
-
Medium 6.8
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker t…
-
Medium 4.3
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
-
Medium 6.8
A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to …
-
Medium 6.7
A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could …
-
Medium 6.7
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attack…
-
Medium 6.5
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on …
-
Medium 6.5
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on …
-
Medium 6.5
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on …
-
Medium 6.5
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on …
-
Medium 6.5
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on …
-
Medium 5.5
A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a…
-
Medium 6.4
A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Wind…
-
Medium 6.7
A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 oper…
-
Medium 5.3
A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer…
-
Medium 4.9
A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a syst…
-
Medium 4.9
A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial o…
-
Medium 6.3
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could all…
-
Medium 6.7
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a…
-
Medium 6.7
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and T…
-
Medium 6.7
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker …
-
Medium 6.5
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoin…
-
Medium 5.5
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use sys…
-
Medium 6.3
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical acc…
-
Medium 6.8
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications ac…
-
Medium 6.5
A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an at…
-
Medium 6.7
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wi…
-
Medium 6.7
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker w…
-
Medium 6.7
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local …