1200 matches found
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US
No description provided...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - us
Lenovo Security Advisory: LEN-15765 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3756 Summary Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems. An attacker wi...
Login information processed by the IMM2 may be exposed to local IMM2 users - Lenovo Support US
No description provided...
Login information processed by the IMM2 may be exposed to local IMM2 users - us
Lenovo Security Advisory: LEN-14054 Potential Impact: Disclosure of login credentials to user with local privileges Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3744 Summary Description: A risk has been identified in the IMM2 firmware of Lenovo System x servers where...
Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - us
Lenovo Security Advisory: LEN-14078 Potential Impact: Erasure or alteration of routing tables within a routing domain Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3752 Summary Description: An industry-wide vulnerability has been identified in the implementation of the...
Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - Lenovo Support US
No description provided...
ThinkPad Compact USB Keyboard with TrackPoint Driver Unquoted Service Path - us
Lenovo Security Advisory: LEN-15061 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3751 Summary Description: An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint...
ThinkPad Compact USB Keyboard with TrackPoint Driver Unquoted Service Path - Lenovo Support US
No description provided...
Intel® PROSet/Wireless Software Denial of Service - us
Lenovo Security Advisory: LEN-14246 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8104 Summary Description: A buffer overflow security vulnerability has been identified in the Intel® PROSet/Wireless Software and Drivers before version...
Intel® PROSet/Wireless Software Denial of Service - Lenovo Support US
No description provided...
Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - us
Lenovo Security Advisory: LEN-15084 Potential Impact: Attacker with physical or administrative access could flash malicious BIOS code Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3754 Summary Description: Some Lenovo brand notebook systems do not have write protections...
Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - Lenovo Support US
No description provided...
Local Root Exploit on Lenovo VIBE Mobile Phones - Lenovo Support US
No description provided...
Local Root Exploit on Lenovo VIBE Mobile Phones - us
Lenovo Security Advisory: LEN-15823 Potential Impact: Elevation of Privilege Severity: Medium Scope of Impact: Lenovo specific CVE Identifier: CVE-2017-3748, CVE-2017-3749, CVE-2017-3750 Summary Description: Vulnerabilities have been identified on Lenovo VIBE Mobile Phones that allow the user or ...
Lenovo Nerve Center for Desktops Privilege Escalation - Lenovo Support US
No description provided...
Intel AMT Clickjacking Vulnerability - Lenovo Support US
No description provided...
Intel AMT Clickjacking Vulnerability - us
Lenovo Security Advisory: LEN-14005 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5697 Summary Description: Insufficient clickjacking protection in the Web User Interface of Intel® AMT firmware versions before 9.1.40.100,...
Lenovo Nerve Center for Desktops Privilege Escalation - us
Lenovo Security Advisory: LEN-15046 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3747 Summary Description: During an internal security review, a vulnerability was discovered in Lenovo Nerve Center for Windows 10 on Desktop systems...
Sierra Wireless WAN Driver Privilege Escalation - Lenovo Support US
No description provided...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
IBM Storwize for Lenovo initialization USB drives contain malware - Lenovo Support US
No description provided...
IBM Storwize for Lenovo initialization USB drives contain malware - us
Lenovo Security Advisory: LEN-14957 Potential Impact: Malware infection on system used to launch initialization tool Severity: Medium Summary Description: Some USB flash drives containing the initialization tool shipped with the IBM Storwize for Lenovo V3500, V3700 and V5000 Gen 1 storage systems...
Apache Struts Open Source Framework Remote Code Execution - us
Lenovo Security Advisory: LEN-14200 Potential Impact: Remote code execution Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5638 Summary Description: Lenovo V3700 V2, Lenovo V3700 V2 XP, Lenovo V5030/V5030F and Storwize V7000 for Lenovo storage devices contain a vulnerability in Apache...
Apache Struts Open Source Framework Remote Code Execution - Lenovo Support US
No description provided...
Lenovo StorSelect DX8200C HyperStore Use-after-free in the IPv6 implementation of the DCCP protocol in the Linux kernel - Lenovo Support US
No description provided...
Credentials sent through the Lenovo ToolsCenter may be exposed to local users - Lenovo Support US
No description provided...
Credentials sent through the Lenovo ToolsCenter may be exposed to local users - us
Lenovo Security Advisory: LEN-10810 Potential Impact: Sensitive information disclosure Severity: Medium Scope of Impact: Lenovo specific CVE Identifier: CVE-2017-3743 Summary Description: If multiple users are concurrently logged into a single system where one user is sending a command via the...
Lenovo XClarity Administrator Credential Disclosure - us
Lenovo Security Advisory: LEN-13671 Potential Impact: Disclosure of credentials to a non-administrative user Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3745 Summary Description: During an internal assessment, a vulnerability was identified in Lenovo XClarity...
Lenovo StorSelect DX8200C HyperStore Use-after-free in the IPv6 implementation of the DCCP protocol in the Linux kernel - us
Lenovo Security Advisory: LEN-15183 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-6074 Summary: A vulnerability has been identified on the Lenovo StorSelect DX8200C MT 5120 running Cloudian HyperStore v6.1 and earlier. Lenovo...
Lenovo XClarity Administrator Credential Disclosure - Lenovo Support US
No description provided...
NVIDIA Windows GPU Driver Privilege Escalation or Denial of Service - us
Lenovo Security Advisory: LEN-12057 Potential Impact: Denial of service and escalation of privileges Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8821, CVE-2016-8822, CVE-2016-8823, CVE-2016-8824, CVE-2016-8825, CVE-2016-8826, CVE-2016-3161, CVE-2016-5852, CVE-2016-4960,...
Brocade Fibre Channel SAN Privilege Escalation - Lenovo Support US
No description provided...
Brocade Fibre Channel SAN Privilege Escalation - us
Lenovo Security Advisory: LEN-14794 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8202 Summary Description: A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS FOS releases earli...
NVIDIA Windows GPU Driver Privilege Escalation or Denial of Service - Lenovo Support US
No description provided...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - Lenovo Support US
No description provided...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - us
Lenovo Security Advisory: LEN-14398 Potential Impact: Disclosure of ad-hoc wifi network key stored in user-readable location Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3742 Summary Description: An internal assessment has identified a vulnerability in Lenovo Connect...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - us
Lenovo Security Advisory: LEN-10149 Potential Impact: Local privilege escalation, cross-site request forgery, insecure connection, possibility to insert a forged code signing certificate Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8228, CVE-2016-8229, CVE-2016-8230,...
Local User Can Alter Trackpoint Functionality in Lenovo Power Management Driver - Lenovo Support US
No description provided...
SHAREit for Android Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Active Protection System Privilege Escalation - us
Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...
SHAREit for Windows and Android Vulnerabilities
Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...
Lenovo Active Protection System Privilege Escalation - Lenovo Support US
No description provided...
SHAREit for Android Vulnerabilities
Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...
SHAREit for Windows and Android Vulnerabilities - Lenovo Support US
No description provided...
Local User Can Alter Trackpoint Functionality in Lenovo Power Management Driver - us
Lenovo Security Advisory: LEN-14440 Potential Impact: A local user could alter trackpoint functionality on the system Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3741 Summary Description: During an internal review, a vulnerability was identified in the Lenovo Power...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us
Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - Lenovo Support US
No description provided...
Intel Direct Connect Interface Can Be Enabled - us
Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...