CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

26 results Clear all

CVE-2023-45079 6.7 MEDIUM EPSS 0.00

Lenovo V50t-13imb Firmware < o4hkt3ca - Out-of-Bounds Read

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

CWE-125 Nov 08, 2023

CVE-2023-45078 6.7 MEDIUM EPSS 0.00

Lenovo Ideacentre C5-14imb05 Firmware < o4hkt3ca - Out-of-Bounds Read

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

CWE-125 Nov 08, 2023

CVE-2023-45077 6.7 MEDIUM EPSS 0.00

Lenovo Ideacentre C5-14imb05 Firmware < o4hkt3ca - Out-of-Bounds Read

A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

CWE-125 Nov 08, 2023

CVE-2023-45076 6.7 MEDIUM EPSS 0.00

Lenovo Ideacentre C5-14imb05 Firmware < o4hkt3ca - Out-of-Bounds Read

A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

CWE-125 Nov 08, 2023

CVE-2023-45075 6.7 MEDIUM EPSS 0.00

Lenovo Ideacentre C5-14imb05 Firmware < o4hkt3ca - Out-of-Bounds Read

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

CWE-125 Nov 08, 2023

CVE-2023-43581 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43580 6.7 MEDIUM EPSS 0.00

Lenovo Desktop < - Buffer Overflow

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43579 6.7 MEDIUM EPSS 0.00

Lenovo Desktop < - Buffer Overflow

A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43578 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43577 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43576 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43575 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43574 4.4 MEDIUM EPSS 0.00

Lenovo Desktop - Info Disclosure

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

CWE-125 Nov 08, 2023

CVE-2023-43573 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43572 4.4 MEDIUM EPSS 0.00

Lenovo Desktop - Info Disclosure

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

CWE-125 Nov 08, 2023

CVE-2023-43571 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43570 6.7 MEDIUM EPSS 0.00

OemSmi - Code Injection

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.

CWE-20 Nov 08, 2023

CVE-2023-43569 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023

CVE-2023-43568 4.4 MEDIUM EPSS 0.00

Lenovo Desktop - Info Disclosure

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

CWE-126 Nov 08, 2023

CVE-2023-43567 6.7 MEDIUM EPSS 0.00

Lenovo Desktop - Buffer Overflow

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CWE-120 Nov 08, 2023