Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2020-8349

An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS)’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled....

Affected Products : cloud_networking_operating_system rackswitch_g8272 rackswitch_g8296 rackswitch_g8332 rackswitch_ne0152t rackswitch_ne10032 rackswitch_ne1032 rackswitch_ne1032t rackswitch_ne1072t rackswitch_ne2572
Published: Oct. 14, 2020

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2020-8348

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited, po...

Affected Products : enterprise_network_disk
Published: Sep. 24, 2020

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2020-8347

A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafted url is visited, possibly through ...

Affected Products : enterprise_network_disk
Published: Sep. 24, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-8346

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written to non-standard locations....

Affected Products : system_interface_foundation
Published: Sep. 15, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8345

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege....

Affected Products : hardware_scan
Published: Oct. 14, 2020

Modified: Nov. 21, 2024
7.3

HIGH

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege....

Affected Products : system_update
Published: Sep. 15, 2020

Modified: Nov. 21, 2024
2.4

LOW

CVE-2020-8341

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in vari...

Affected Products : thinkpad_t490_\(20nx\)_firmware thinkpad_t490_\(20qx\)_firmware thinkpad_t490_\(20rx\)_firmware thinkpad_t490s_\(20nx\)_firmware thinkpad_t590_\(20nx\)_firmware thinkpad_x1_carbon_\(20qx\)_firmware thinkpad_x1_yoga_\(20qx\)_firmware thinkpad_x390_\(20qx\)_firmware thinkpad_x390_\(20sx\)_firmware thinkpad_t495_drift_firmware +10 more products
Published: Sep. 01, 2020

Modified: Nov. 21, 2024
6.3

MEDIUM

CVE-2020-8340

A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Management Controller (BMC) web interface during an internal security review. ...

Affected Products : integrated_management_module_2 integrated_management_module_2 flex_system_x240_m5 flex_system_x280_x6 flex_system_x480_x6 flex_system_nx360_m5 flex_system_x240 flex_system_x3250_m6 flex_system_x3500_m5 flex_system_x3550_m5 +6 more products
Published: Sep. 15, 2020

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2020-8339

A cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter Advanced Management Module (AMM) web interface prior to version 3.68n [BPET68N]. This vulnerability could allow an authenticated user's AMM credentials to be ...

Affected Products : bladecenter_advanced_management_module_firmware bladecenter_advanced_management_module
Published: Sep. 15, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system....

Affected Products : diagnostics
Published: Oct. 14, 2020

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code....

Affected Products : thinkpad_11e thinkpad_e480 thinkpad_e580 thinkpad_l380 thinkpad_l380_yoga thinkpad_l480 thinkpad_l580 thinkpad_t470p thinkpad_x270 thinkpad_x380_yoga +73 more products
Published: Jun. 09, 2020

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash....

Affected Products : thinkpad_e490s_firmware thinkpad_s3_firmware thinkpad_e490_firmware thinkpad_e590_firmware thinkpad_r490_firmware thinkpad_r590_firmware thinkpad_l390_yoga_firmware thinkpad_s2_yoga_4th_gen_firmware thinkpad_l490_firmware thinkpad_l590_firmware +66 more products
Published: Jun. 09, 2020

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2020-8335

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button ...

Affected Products : thinkpad_a275_firmware thinkpad_a475_firmware thinkpad_a285_firmware thinkpad_a485_firmware thinkpad_x395_firmware thinkpad_x1_carbon_\(20bx\)_firmware thinkpad_t495_drift_firmware thinkpad_t495s_jazz_firmware thinkpad_a275 thinkpad_a475 +6 more products
Published: Sep. 01, 2020

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access....

Affected Products : thinkpad_a275_firmware thinkpad_a475_firmware thinkpad_a285_firmware thinkpad_a485_firmware thinkpad_x395_firmware thinkpad_t495_firmware thinkpad_t495s_firmware thinkpad_a275 thinkpad_a475 thinkpad_a285 +4 more products
Published: Jun. 09, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8333

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution...

Affected Products : m4500_firmware qitian_4500_firmware qitian_b4550_firmware qitian_m4550_firmware thinkcentre_e73s_firmware thinkcentre_m4500k_firmware thinkcentre_m4500q_firmware thinkcentre_m4500t_firmware thinkcentre_m4500s_firmware yangtian_afh81_firmware +45 more products
Published: Sep. 24, 2020

Modified: Nov. 21, 2024
6.9

MEDIUM

CVE-2020-8332

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected....

Affected Products : system_x3750_m4_firmware bladecenter_hs23_firmware bladecenter_hs23e_firmware compute_node-x440_firmware flex_system_x220_firmware flex_system_x240_firmware flex_system_x440_firmware nextscale_nx360_m4_firmware system_x3300_m4_firmware system_x3500_m4_firmware +26 more products
Published: Oct. 14, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8330

A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device, preventing subsequent print jobs until the printer is reb...

Affected Products : lj4010dn_firmware lj6700dn_firmware m8960dnf_firmware lj4010dn lj6700dn m8960dnf
Published: May. 28, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8329

A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device, causing an error to be displayed and preventing printer f...

Affected Products : lj4010dn_firmware lj6700dn_firmware m8960dnf_firmware lj4010dn lj6700dn m8960dnf
Published: May. 28, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8327

A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges....

Affected Products : vantage
Published: Apr. 14, 2020

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2020-8326

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges....

Affected Products : drivers_management
Published: Jul. 24, 2020

Modified: Nov. 21, 2024

Showing 20 of 294863 Results

Browse by Apps

Latest CVE Feed

9.8

6.1

6.1

5.5

7.8

7.3

2.4

6.3

6.1

7.8

7.2

6.8

6.8

6.8

7.8

6.9

7.8

7.8

7.8

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable