Vulnerabilidades de Lenovo
CVEs publicadas que afetam produtos de Lenovo: 76 registro(s), com severidade, exploração e correções.
Vantage 7App Store 6Pcmanager 4Smart Connect 4IdeaPad Slim 3 16IRH8 BIOS 4Legion Pro 7 16ADR10H BIOS 4Software Fix 4Legion 7 16IAX10 BIOS 4ThinkBook 16p G6 IAX BIOS 4Legion 5 15IRX10 BIOS 4Lenovo V15 G6 ARP BIOS 4Legion Pro 5 16IRX10 BIOS 4IdeaPad Slim 3 15AMN8 BIOS 4Yoga Book 9 13IMU9 BIOS 4IdeaPad Slim 3 14ITN9 BIOS 4Yoga 9 2-in-1 14IMH9 BIOS 4IdeaPad Pro 5 16IPH11 BIOS 4LOQ 15ARP10E BIOS 4Idea Tab Pro TB373FU 4Legion Pro 7 16ARX8H BIOS 4Tab K9 TB305FU 4Tab K9 TB305XU 4Lenovo V14 G6 ITN BIOS 4Tab Extreme TB570ZU TB570FU 4Tab M10 5G TB360ZU 4ThinkBook 16p G6 ADR BIOS 4Legion Slim 5 14APH8 BIOS 4Lenovo V15 G2 IJL Laptop BIOS 4IdeaPad Pro 5 16IAH10 BIOS 4Legion Pro 5 16IAX10 BIOS 4Yoga Tab Plus TB520FU 4LOQ 15IAX9E BIOS 4Dock Manager 4IdeaPad Pro 5 16ASP10 BIOS 4Legion Pro 7 16AFR10H BIOS 4Legion Pro 5 16AFR10 BIOS 4Legion 7 16AGP11 BIOS 4IdeaPad Pro 5 16AGP11 BIOS 4Legion 5 15IAX10 BIOS 4Yoga Book 9 14IAH10 BIOS 4
CVE-2017-5638
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-755 10/03/2017
Apache Struts Remote Code Execution Vulnerability
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.