alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2019-6031 (published 2019-12-26)
Cross-site scripting vulnerability in KINZA for Windows version 5.9.2 and earlier and for Mac version 5.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via RSS reader.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: dayz
Affected products: kinza
CVE-2019-6032 (published 2019-12-26)
The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-295
Affected vendors: ntv
Affected products: news_24
CVE-2019-6033 (published 2019-12-26)
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: appleple
Affected products: a-blog_cms
CVE-2019-6034 (published 2019-12-26)
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-74
Affected vendors: appleple
Affected products: a-blog_cms
CVE-2019-6035 (published 2019-12-26)
Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: yahoo
Affected products: athenz
CVE-2019-6036 (published 2020-01-27)
Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: f-revocrm
Affected products: f-revocrm
CVE-2019-6109 (published 2019-01-31)
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-116
Affected vendors: canonical, debian, fedoraproject, fujitsu, netapp, openbsd, redhat, siemens, winscp
Affected products: debian_linux, element_software, enterprise_linux, enterprise_linux_eus, enterprise_linux_server_aus, enterprise_linux_server_tus, fedora, m10-1, m10-1_firmware, m10-4, m10-4_firmware, m10-4s, m10-4s_firmware, m12-1, m12-1_firmware, m12-2, m12-2_firmware, m12-2s, m12-2s_firmware, ontap_select_deploy, openssh, scalance_x204rna, scalance_x204rna_eec, scalance_x204rna_eec_firmware, scalance_x204rna_firmware
CVE-2019-6110 (published 2019-01-31)
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-838
Affected vendors: netapp, openbsd, siemens, winscp
Affected products: element_software, ontap_select_deploy, openssh, scalance_x204rna, scalance_x204rna_eec, scalance_x204rna_eec_firmware, scalance_x204rna_firmware, storage_automation_store, winscp
CVE-2019-6111 (published 2019-01-31)
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: apache, canonical, debian, fedoraproject, freebsd, fujitsu, openbsd, redhat, siemens, winscp
Affected products: debian_linux, enterprise_linux, enterprise_linux_eus, enterprise_linux_server_aus, enterprise_linux_server_tus, fedora, freebsd, m10-1, m10-1_firmware, m10-4, m10-4_firmware, m10-4s, m10-4s_firmware, m12-1, m12-1_firmware, m12-2, m12-2_firmware, m12-2s, m12-2s_firmware, mina_sshd, openssh, scalance_x204rna, scalance_x204rna_eec, scalance_x204rna_eec_firmware, scalance_x204rna_firmware
CVE-2019-6112 (published 2020-08-14)
A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter (aka $search_term or the Search field).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: graphpaperpress
Affected products: sell_media
CVE-2019-6113 (published 2019-08-30)
Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot) and %2f to the default URI.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: onkyo
Affected products: tx-nr686, tx-nr686_firmware
CVE-2019-6114 (published 2019-06-19)
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: corel
Affected products: paintshop_pro_2019
CVE-2019-6116 (published 2019-03-21)
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: artifex, canonical, debian, fedoraproject, opensuse, redhat
Affected products: debian_linux, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_eus, enterprise_linux_server_tus, enterprise_linux_workstation, fedora, ghostscript, leap, ubuntu_linux
CVE-2019-6117 (published 2019-04-09)
The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wpape
Affected products: ape_gallery
CVE-2019-6120 (published 2019-11-06)
An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a wallet via Email address allows remote attackers to submit a large number of email addresses to identify valid ones. By exploiting this vulnerability with CVE-2019-6122 (Username Enumeration) an adversary can enumerate a large number of valid users' Email addresses.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-770
Affected vendors: nicehash
Affected products: miner
CVE-2019-6121 (published 2019-11-06)
An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-862
Affected vendors: nicehash
Affected products: miner
CVE-2019-6122 (published 2019-11-06)
A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-209
Affected vendors: nicehash
Affected products: miner
CVE-2019-6126 (published 2019-01-11)
The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-425
Affected vendors: advance_peer_to_peer_mlm_script_project
Affected products: advance_peer_to_peer_mlm_script
CVE-2019-6127 (published 2019-01-11)
An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be used for PHP code execution via "INTO OUTFILE" with a .php filename.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: xiaocms
Affected products: xiaocms
CVE-2019-6128 (published 2019-01-11)
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-401
Affected vendors: canonical, debian, libtiff, opensuse
Affected products: debian_linux, leap, libtiff, ubuntu_linux
CVE-2019-6129 (published 2019-01-11)
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: libpng
Affected products: libpng
CVE-2019-6130 (published 2019-01-11)
Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-118
Affected vendors: artifex
Affected products: mupdf
CVE-2019-6131 (published 2019-01-11)
svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-674
Affected vendors: artifex
Affected products: mupdf
CVE-2019-6132 (published 2019-01-11)
An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4_EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: axiosys
Affected products: bento4
CVE-2019-6133 (published 2019-01-11)
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: canonical, debian, polkit_project, redhat
Affected products: debian_linux, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_eus, enterprise_linux_server_tus, enterprise_linux_workstation, polkit, ubuntu_linux
CVE-2019-6135 (published 2019-01-11)
An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called from Asn1PrimitiveValue_create in mms/asn1/asn1_ber_primitive_value.c, as demonstrated by goose_publisher_example.c and iec61850_9_2_LE_example.c.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: mz-automation
Affected products: libiec61850
CVE-2019-6136 (published 2019-01-11)
An issue has been found in libIEC61850 v1.3.1. Ethernet_setProtocolFilter in hal/ethernet/linux/ethernet_linux.c has a SEGV, as demonstrated by sv_subscriber_example.c and sv_subscriber.c.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: mz-automation
Affected products: libiec61850
CVE-2019-6137 (published 2019-01-11)
An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: mz-automation
Affected products: lib60870
CVE-2019-6138 (published 2019-01-11)
An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory/lib_memory.c have memory leaks when called from mms/iso_mms/common/mms_value.c, server/mms_mapping/mms_mapping.c, and server/mms_mapping/mms_sv.c (via common/string_utilities.c), as demonstrated by iec61850_9_2_LE_example.c.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: mz-automation
Affected products: libiec61850
CVE-2019-6139 (published 2019-02-07)
Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001. FUID requires this port only for local connections through the loopback interface.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: forcepoint
Affected products: user_id
CVE-2019-6140 (published 2019-04-09)
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: forcepoint
Affected products: email_security
CVE-2019-6142 (published 2019-11-05)
It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix in order to remediate this issue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: forcepoint
Affected products: email_security, security_manager
CVE-2019-6143 (published 2019-08-20)
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-287
Affected vendors: forcepoint
Affected products: next_generation_firewall
CVE-2019-6144 (published 2019-10-23)
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-284
Affected vendors: forcepoint
Affected products: one_endpoint
CVE-2019-6145 (published 2019-09-20)
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: forcepoint
Affected products: vpn_client
CVE-2019-6146 (published 2020-01-22)
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: forcepoint
Affected products: web_security
CVE-2019-6147 (published 2019-12-23)
Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW), possibly resulting in settings that are weaker than expected. All SMC versions lower than 6.5.12 or 6.7.1 are vulnerable.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-704
Affected vendors: forcepoint
Affected products: next_generation_firewall_security_management_center
CVE-2019-6149 (published 2019-03-18)
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: lenovo
Affected products: dynamic_power_reduction, thinkpad_x1_carbon
CVE-2019-6154 (published 2019-04-10)
A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with local access to execute code on the system.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: lenovo
Affected products: bootable_usb, ideacentre, thinkcentre, thinkpad, thinkstation
CVE-2019-6155 (published 2019-04-22)
A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: ibm
Affected products: bladecenter_hs23, bladecenter_hs23_firmware, system_x3530_m4, system_x3530_m4_firmware, system_x3630_m4, system_x3630_m4_firmware, system_x3650_m4_hd, system_x3650_m4_hd_firmware
CVE-2019-6156 (published 2019-04-10)
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
Severity: LOW (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-667
Affected vendors: lenovo
Affected products: 330-14igm, 330-14igm_firmware, 330-15igm, 330-15igm_firmware, 510-15ikl, 510-15ikl_firmware, 510s-08ikl, 510s-08ikl_firmware, 530s-07icb, 530s-07icb_firmware, aio300-23isu\(c5130\), aio300-23isu\(c5130\)_firmware, aio520-22ikl, aio520-22ikl_firmware, aio520-22iku, aio520-22iku_firmware, aio520-24ikl, aio520-24ikl_firmware, aio520-24iku, aio520-24iku_firmware, aio520-27ikl, aio520-27ikl_firmware, aio_910-27ish, aio_910-27ish_firmware, aio_y910-27ish
CVE-2019-6157 (published 2019-04-22)
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: ibm, lenovo
Affected products: bladecenter_hs22, bladecenter_hs22_firmware, bladecenter_hs23, bladecenter_hs23_firmware, bladecenter_hs23e, bladecenter_hs23e_firmware, flex_system_x220_m4, flex_system_x220_m4_firmware, flex_system_x222_m4, flex_system_x222_m4_firmware, flex_system_x240_m4, flex_system_x240_m4_firmware, flex_system_x240_m5, flex_system_x240_m5_firmware, flex_system_x280_m4, flex_system_x280_m4_firmware, flex_system_x280_x6, flex_system_x280_x6_firmware, flex_system_x440_m4, flex_system_x440_m4_firmware, flex_system_x480_m4, flex_system_x480_m4_firmware, flex_system_x480_x6, flex_system_x480_x6_firmware, flex_system_x880
CVE-2019-6158 (published 2019-05-03)
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6159 (published 2019-08-19)
A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IMM v1) embedded Baseboard Management Controller (BMC). This vulnerability could allow an unauthenticated user to cause JavaScript code to be stored in the IMM log which may then be executed in the user's web browser when IMM log records containing the JavaScript code are viewed. The JavaScript code is not executed on IMM itself. The later IMM2 (IMM v2) is not affected.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: lenovo
Affected products: bladecenter_hs22, bladecenter_hs22_firmware, bladecenter_hs22v, bladecenter_hs22v_firmware, bladecenter_hx5, bladecenter_hx5_firmware, system_x3400_m3, system_x3400_m3_firmware, system_x3500_m2, system_x3500_m2_firmware, system_x3500_m3, system_x3500_m3_firmware, system_x3550_m3, system_x3550_m3_firmware, system_x3560_m2, system_x3560_m2_firmware, system_x3630_m3, system_x3630_m3_firmware, system_x3650_m3, system_x3650_m3_firmware, system_x3690_x5, system_x3690_x5_firmware, system_x3850_x5, system_x3850_x5_firmware, system_x3950_x5
CVE-2019-6160 (published 2019-07-16)
A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: lenovo
Affected products: home_media_network_hard_drive, home_media_network_hard_drive_firmware, ix12-300r, ix12-300r_firmware, px12-350r, px12-350r_firmware, storcenter_ix-200, storcenter_ix2-200, storcenter_ix2-200_firmware, storcenter_ix4-200d, storcenter_ix4-200d_firmware, storcenter_ix4-200rl, storcenter_ix4-200rl_firmware
CVE-2019-6161 (published 2019-09-26)
An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain circumstances. This vulnerability does not affect ThinkSystem XCC, System x IMM2, or other BMCs.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-384
Affected vendors: lenovo
Affected products: cp_storage_block, cp_storage_block_firmware
CVE-2019-6163 (published 2019-06-26)
A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-404
Affected vendors: lenovo
Affected products: b_series, c100, c200, e_series, j100, j105, j110, j115, j200, j200p, j205, k_series, n100, n200, s200, s200p, s205, system_update, thinkcentre, thinkpad, thinkstation, v100, v200, v_series
CVE-2019-6165 (published 2019-08-19)
A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: lenovo
Affected products: yoga_700-11isk, yoga_700-11isk_firmware, yoga_700-14isk, yoga_700-14isk_firmware
CVE-2019-6166 (published 2019-06-26)
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: lenovo
Affected products: ideacentre, ideapad, service_bridge, tablet, thinkcentre, thinkpad, thinkstation, yoga
CVE-2019-6167 (published 2019-06-26)
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: ideacentre, ideapad, service_bridge, tablet, thinkcentre, thinkpad, thinkstation, yoga
CVE-2019-6168 (published 2019-06-26)
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: ideacentre, ideapad, service_bridge, tablet, thinkcentre, thinkpad, thinkstation, yoga
CVE-2019-6169 (published 2019-06-26)
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-311
Affected vendors: lenovo
Affected products: ideacentre, ideapad, service_bridge, tablet, thinkcentre, thinkpad, thinkstation, yoga
CVE-2019-6170 (published 2019-11-12)
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: 130-14ikb, 130-14ikb_firmware, 130-15ikb, 130-15ikb_firmware, 330-14ikb, 330-14ikb_firmware, 330-14ikbr, 330-14ikbr_firmware, 330-15ich, 330-15ich_firmware, 330-15ikb, 330-15ikb_firmware, 330-15ikbr, 330-15ikbr_firmware, 330-15ikbr_touch, 330-15ikbr_touch_firmware, 330-17ich, 330-17ich_firmware, 330-17ikb, 330-17ikb_firmware, 330-17ikbr, 330-17ikbr_firmware, 330c-14ikb, 330c-14ikb_firmware, 330c-15ikb
CVE-2019-6171 (published 2019-08-19)
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: 20a7, 20a7_firmware, 20a8, 20a8_firmware, 20a9, 20a9_firmware, 20aa, 20aa_firmware, 20ab, 20ab_firmware, 20ac, 20ac_firmware, 20aj, 20aj_firmware, 20ak, 20ak_firmware, 20al, 20al_firmware, 20am, 20am_firmware, 20an, 20an_firmware, 20aq, 20aq_firmware, 20ar
CVE-2019-6172 (published 2019-11-12)
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: 130-14ikb, 130-14ikb_firmware, 130-15ikb, 130-15ikb_firmware, 330-14ikb, 330-14ikb_firmware, 330-14ikbr, 330-14ikbr_firmware, 330-15ich, 330-15ich_firmware, 330-15ikb, 330-15ikb_firmware, 330-15ikbr, 330-15ikbr_firmware, 330-15ikbr_touch, 330-15ikbr_touch_firmware, 330-17ich, 330-17ich_firmware, 330-17ikb, 330-17ikb_firmware, 330-17ikbr, 330-17ikbr_firmware, 330c-14ikb, 330c-14ikb_firmware, 330c-15ikb
CVE-2019-6173 (published 2020-06-09)
A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative privileges.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: lenovo
Affected products: installation_package
CVE-2019-6175 (published 2019-09-26)
A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: lenovo
Affected products: system_update
CVE-2019-6176 (published 2019-11-20)
A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: lenovo
Affected products: thinkpad_usb-c_dock, thinkpad_usb-c_dock_firmware
CVE-2019-6177 (published 2019-08-21)
A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: lenovo
Affected products: solution_center
CVE-2019-6178 (published 2019-08-19)
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: lenovo
Affected products: home_media_network_hard_drive, home_media_network_hard_drive_firmware, ix12-300r, ix12-300r_firmware, px12-350r, px12-350r_firmware, storecenter_ix2-200, storecenter_ix2-200_firmware, storecenter_ix4-200d, storecenter_ix4-200d_firmware, storecenter_ix4-200rl, storecenter_ix4-200rl_firmware
CVE-2019-6179 (published 2019-09-03)
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: lenovo
Affected products: xclarity_administrator, xclarity_integrator
CVE-2019-6180 (published 2019-09-03)
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6181 (published 2019-09-03)
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6182 (published 2019-09-03)
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-1236
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6183 (published 2019-12-10)
A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: lenovo
Affected products: energy_management
CVE-2019-6184 (published 2019-11-20)
A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: customer_engagement_service
CVE-2019-6186 (published 2019-11-20)
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: system_interface_foundation
CVE-2019-6187 (published 2019-11-20)
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-1236
Affected vendors: lenovo
Affected products: _thinksystem_sr670, thinkagile_7d1h, thinkagile_7x82, thinkagile_7x83, thinkagile_7y11, thinkagile_7y12, thinkagile_7y13, thinkagile_7y14, thinkagile_7y88, thinkagile_7y90, thinkagile_7y92, thinkagile_7y93, thinkagile_7y94, thinkagile_7z03, thinkagile_7z04, thinkagile_7z05, thinkagile_7z06, thinkagile_7z07, thinkagile_7z20, thinkagile_yx84, thinksystem_sd530, thinksystem_sd650, thinksystem_sn550, thinksystem_sn850, thinksystem_sr150
CVE-2019-6188 (published 2019-11-12)
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: 130-14ikb, 130-14ikb_firmware, 130-15ikb, 130-15ikb_firmware, 330-14ikb, 330-14ikb_firmware, 330-14ikbr, 330-14ikbr_firmware, 330-15ich, 330-15ich_firmware, 330-15ikb, 330-15ikb_firmware, 330-15ikbr, 330-15ikbr_firmware, 330-15ikbr_touch, 330-15ikbr_touch_firmware, 330-17ich, 330-17ich_firmware, 330-17ikb, 330-17ikb_firmware, 330-17ikbr, 330-17ikbr_firmware, 330c-14ikb, 330c-14ikb_firmware, 330c-15ikb
CVE-2019-6189 (published 2019-11-20)
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: lenovo
Affected products: system_interface_foundation
CVE-2019-6190 (published 2020-02-14)
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-665
Affected vendors: lenovo
Affected products: 510-15ikl, 510-15ikl_firmware, 510s-08ikl, 510s-08ikl_firmware, a340-22_iwl, a340-22_iwl_firmware, a340-22ast, a340-22ast_firmware, a340-22icb, a340-22icb_firmware, a340-24_iwl, a340-24_iwl_firmware, a340-24icb, a340-24icb_firmware, aio520-22iku, aio520-22iku_firmware, aio520-24arr, aio520-24arr_firmware, aio520-24iku, aio520-24iku_firmware, aio520-27ikl, aio520-27ikl_firmware, aio_330-20ast, aio_330-20ast_firmware, aio_330-20igm
CVE-2019-6191 (published 2019-11-20)
A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: lenovo
Affected products: paper
CVE-2019-6192 (published 2019-12-10)
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: lenovo
Affected products: power_management_driver, thinkpad_13_gen_2, thinkpad_25, thinkpad_a275, thinkpad_a285, thinkpad_a475, thinkpad_a485, thinkpad_e14, thinkpad_e15, thinkpad_e470, thinkpad_e470c, thinkpad_e475, thinkpad_e480, thinkpad_e490, thinkpad_e495, thinkpad_e570, thinkpad_e570c, thinkpad_e575, thinkpad_e580, thinkpad_e590, thinkpad_e595, thinkpad_l13, thinkpad_l13_yoga, thinkpad_l380, thinkpad_l380_yoga
CVE-2019-6193 (published 2020-02-14)
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6194 (published 2020-02-14)
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: lenovo
Affected products: xclarity_administrator
CVE-2019-6195 (published 2020-02-14)
An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-264
Affected vendors: lenovo
Affected products: thinkagile_hx_1000, thinkagile_hx_2000, thinkagile_hx_3000, thinkagile_hx_5000, thinkagile_hx_7000, thinkagile_mx_sr650, thinkagile_vx_1000, thinkagile_vx_2000, thinkagile_vx_3000, thinkagile_vx_5000, thinkagile_vx_7000, thinksystem_sd530, thinksystem_sd650_dwc, thinksystem_sn550, thinksystem_sn850, thinksystem_sr150, thinksystem_sr158, thinksystem_sr250, thinksystem_sr258, thinksystem_sr530, thinksystem_sr550, thinksystem_sr570, thinksystem_sr590, thinksystem_sr630, thinksystem_sr650
CVE-2019-6196 (published 2020-06-09)
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: lenovo
Affected products: installation_package
CVE-2019-6197 (published 2024-07-31)
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: lenovo
Affected products: pcmanager
CVE-2019-6198 (published 2024-07-31)
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: lenovo
Affected products: pcmanager
CVE-2019-6200 (published 2019-03-05)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: iphone_os, mac_os_x
CVE-2019-6201 (published 2019-12-18)
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: icloud, iphone_os, itunes, safari, tvos
CVE-2019-6202 (published 2019-03-05)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: apple
Affected products: iphone_os, mac_os_x, watchos
CVE-2019-6203 (published 2020-04-17)
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tvos
CVE-2019-6204 (published 2019-12-18)
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: apple
Affected products: iphone_os, safari
CVE-2019-6205 (published 2019-03-05)
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tvos
CVE-2019-6206 (published 2019-03-04)
An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: apple
Affected products: iphone_os
CVE-2019-6207 (published 2019-12-18)
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tvos, watchos
CVE-2019-6208 (published 2019-03-05)
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-665
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tv_os
CVE-2019-6209 (published 2019-03-05)
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tv_os, watchos
CVE-2019-6210 (published 2019-03-05)
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tv_os, watchos
CVE-2019-6211 (published 2019-03-05)
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os, mac_os_x
CVE-2019-6212 (published 2019-03-05)
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple, canonical, microsoft
Affected products: icloud, iphone_os, itunes, safari, tvos, ubuntu_linux, windows
CVE-2019-6213 (published 2019-03-05)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tv_os, watchos
CVE-2019-6214 (published 2019-03-05)
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tv_os, watchos