11929 matches found
CVE-2025-10495
CVE-2025-10495 affects Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client apps. The descriptions indicate a potential code execution vulnerability that an attacker on the same logical network could trigger under certain conditions. Public details in the provided so...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-8485
CVE-2025-8485 affects Lenovo App Store. Description: an improper permissions vulnerability could allow a locally authenticated user to execute code with elevated privileges during the installation of an application. Affected component: Lenovo App Store's installation process. Root cause: improper...
EUVD-2025-114712
Malicious code in cypress-css-minimizer-webpack-plugin-webpack-configstore npm...
EUVD-2025-115582
Malicious code in centauri-configstore-postcss-mutation npm...
Lenovo多款产品 安全漏洞
Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...
PT-2025-46690
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...
Dee Store 安全漏洞
Dee Store is an online shopping web application by the individual developer Dinuka Navaratna. A security vulnerability exists in Dee Store version 1.0, which stems from a lack of authorization validation and could allow a remote attacker to bypass privilege control by constructing a malicious...
PT-2025-46702
Name of the Vulnerable Software and Affected Versions Lenovo App Store affected versions not specified Description An improper permissions issue exists in Lenovo App Store that may allow a locally authenticated user to run code with higher privileges when installing an application. Recommendation...
PT-2025-46717
Name of the Vulnerable Software and Affected Versions DinukaNavaratna Dee Store version 1.0 Description A flaw exists in DinukaNavaratna Dee Store version 1.0 that can lead to missing authorization due to manipulation. The issue is present in an unknown function and can be exploited remotely. The...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990874)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990874 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data...
Malicious code in katrina-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bert-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carpenter-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de1eef867a523bc2a18bf9c404d407218f894d0cd04ad930c8daea5d8a95f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-82584
Malicious code in bryce-wallet-store npm...
EUVD-2025-82363
Malicious code in conway-wallet-store npm...
EUVD-2025-80581
Malicious code in shauna-wallet-store npm...