1208 matches found
SHAREit for Windows and Android Vulnerabilities
Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...
Local User Can Alter Trackpoint Functionality in Lenovo Power Management Driver - us
Lenovo Security Advisory: LEN-14440 Potential Impact: A local user could alter trackpoint functionality on the system Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3741 Summary Description: During an internal review, a vulnerability was identified in the Lenovo Power...
SHAREit for Android Vulnerabilities
Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...
SHAREit for Windows and Android Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us
Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - Lenovo Support US
No description provided...
Intel Direct Connect Interface Can Be Enabled - us
Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...
Intel Direct Connect Interface Can Be Enabled - Lenovo Support US
No description provided...
Lenovo Updates Remote Code Execution - us
Lenovo Security Advisory: LEN-8313 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8237 Summary Description: During an internal investigation, a remote code execution vulnerability was discovered in Lenovo Updates not Lenovo System...
Lenovo Updates Remote Code Execution - Lenovo Support US
No description provided...
Privilege Escalation Vulnerability in Lenovo CCSDK - Lenovo Support US
No description provided...
Privilege Escalation Vulnerability in Lenovo CCSDK - us
Lenovo Security Advisory: LEN-11340 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8235 Summary Description: An unquoted service path vulnerability was identified in the Lenovo Customer Care Software Development Kit CCSDK that could...
Intel® Wireless Bluetooth® Driver Unquoted Service Path - Lenovo Support US
No description provided...
Intel® Wireless Bluetooth® Driver Unquoted Service Path - us
Lenovo Security Advisory: LEN-11158 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8102 Summary Description: A denial of service vulnerability exists in the Intel® Wireless Bluetooth® Driver for Microsoft Windows. These drivers are...
NVidia Windows GPU Display Driver Contains Multiple Vulnerabilities in the Kernel Mode Layer - us
Lenovo Security Advisory: LEN-10822 Potential Impact: Denial of service and escalation of privileges Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8805, CVE-2016-8806, CVE-2016-8807, CVE-2016-8808, CVE-2016-8809. CVE-2016-8810, CVE-2016-8811, CVE-2016-7391, CVE-2016-7387,...
Denial of Service Vulnerabilities in NVidia® Drivers that affect Quadro, NVS and GeForce Windows-based Systems - Lenovo Support US
No description provided...
Denial of Service Vulnerabilities in NVidia® Drivers that affect Quadro, NVS and GeForce Windows-based Systems
Lenovo Security Advisory: LEN-9334 Potential Impact: Remote Desktop denial of service and blue screen crash Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-4959, CVE-2016-3161, CVE-2016-5852, CVE-2016-4960, CVE-2016-5025, CVE-2016-4961 Summary Description: Multiple...
NVidia Windows GPU Display Driver Contains Multiple Vulnerabilities in the Kernel Mode Layer - Lenovo Support US
No description provided...
Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver
Lenovo Security Advisory: LEN-7484 Potential Impact: Local privilege escalation or denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-5647 Summary Description: Multiple potential vulnerabilities exist in the Intel® Graphics Driver for Microsoft Windows. These...
Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - us
Lenovo Security Advisory: LEN-9307 Potential Impact: Reset of TSM to defaults Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8236 Summary Description: A vulnerability was identified on certain Lenovo ThinkServer systems where the ThinkServer System Manager TSM may reset ...
Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - Lenovo Support US
No description provided...
Credential disclosure in LXCA log files - us
Lenovo Security Advisory: LEN-11635 Potential Impact: Disclosure of credentials to a non-privileged user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8233 Summary Description: During an internal security review, log files generated by Lenovo XClarity Administrator LXCA...
Credential disclosure in LXCA log files - Lenovo Support US
No description provided...
DOM-Based Cross-Site Scripting Vulnerability in the Advanced Management Module (AMM) - us
Lenovo Security Advisory: LEN-5700 Potential Impact: DOM based XSS Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8232 Summary Description: A Document Object Model-DOM based cross-site scripting vulnerability has been identified in the Advanced Management Module AMM of...
DOM-Based Cross-Site Scripting Vulnerability in the Advanced Management Module (AMM) - Lenovo Support US
No description provided...
Intel Processor Memory Sinkhole Vulnerability - Lenovo Support US
No description provided...
Intel Processor Memory Sinkhole Vulnerability
Lenovo Security Advisory: LEN-3748 Summary: Memory Sinkhole Vulnerability Description: In August 2015 at the Black Hat security conference, researcher Chris Domas presented a vulnerability found in Intel x86 processors manufactured between 1997 and 2010 prior to the Sandy Bridge generation. Throu...
Intel® Ethernet Controller X710/XL710 NVM Denial of Service Vulnerability - us
Lenovo Security Advisory: LEN-12029 Potential Impact: Denial of service to the Ethernet controller Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8106 Summary Description: A security vulnerability in the Intel® Ethernet Controller X710 and Intel® Ethernet Controller XL710...
Intel® Ethernet Controller X710/XL710 NVM Denial of Service Vulnerability - Lenovo Support US
No description provided...
Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface - Lenovo Support US
No description provided...
Certain BIOS versions may include an AMI Test Key that could compromise Secure Boot protections - lu
Lenovo Security Advisory: LEN-7806 Potential Impact: Secure boot may be compromised by an attacker with local access Severity: High Scope of Impact: Lenovo-specific Summary Description: Secure Boot is a security standard to help make sure that your PC boots using only trusted software. When the P...
Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center - Lenovo Support US
No description provided...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - Lenovo Support US
No description provided...
Samba Remote Code Execution Vulnerability
Lenovo Security Advisory: LEN-2015-016 Potential Impact: Execution of arbitrary code Severity: High Summary: Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other...
QEMU i8254 PIT Emulation Bug
Lenovo Security Advisory: LEN-2015-075 Potential Impact: Escalation of Privileges Severity: High Summary: A vulnerability was reported in QEMU where a local user on the guest system could potentially obtain elevated privileges on the target host system. This vulnerability was reported to Red Hat...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - us
Lenovo Security Advisory: LEN-10617 Potential Impact: Access to systems through IPMI if default settings are not changed Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2013-4037, CVE-2013-4031 Summary Description: Various risks with the industry-standard Intelligent Platform...
Samba Remote Code Execution Vulnerability - Lenovo Support US
No description provided...
Certain BIOS versions may include an AMI Test Key that could compromise Secure Boot protections - Lenovo Support NL
No description provided...
Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface
Lenovo Security Advisory: LEN-3846 Potential Impact: Disclosure of information about device Severity:Low Summary: An unauthenticated user may be able to view device information about the LenovoEMC device if the management interface accessible over the internet. Even with this vunerability, no dat...
Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center
Lenovo Security Advisory:LEN-2015-074, LEN-2746 Potential Impact: Escalation of Privileges Severity: High Summary: Multiple vulnerabilities have been identified in the following products: - IBM System Networking Switch Center - Lenovo Switch Center Description: Lenovo Switch Center, previously...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - us
Lenovo Security Advisory: LEN-10605 Potential Impact: Disclosure of temporary software-defined administrator credentials for LXCA by a non-privileged user Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8221 Summary Description: During an internal security review, Lenovo...
Venom
Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...
USB Enhanced Performance Keyboard - Lenovo Support US
No description provided...
USB Enhanced Performance Keyboard
Lenovo Security Advisory: LEN-2015-015 Potential Impact: Escalation of Privilege Severity: Low Summary: Lenovo’s “USB Enhanced Performance Keyboard” software has a known issue where debug code was accidently left in the application. The debug code includes information about which keys on the...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - Lenovo Support US
No description provided...
Venom - Lenovo Support US
No description provided...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - my
Lenovo Security Advisory: LEN-7814 Potential Impact: Arbitrary process termination or code execution by unprivileged local users Severity: High Scope of Impact: Lenovo specific Summary Description: Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - Lenovo Support MY
No description provided...
Privilege Escalation Vulnerability in Lenovo Transition Application - us
Lenovo Security Advisory: LEN-12508 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8227 Summary Description: A vulnerability was identified in the Lenovo Transition program specific to some Lenovo Yoga, Flex and Miix systems...