|
248001
|
9.8 |
CRITICAL
Network
|
emc
|
avamar_server
|
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to th…
|
CWE-287
Improper Authentication
|
CVE-2017-4989
|
2024-11-21 12:26 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248002
|
7.2 |
HIGH
Network
|
emc
|
isilon_onefs
|
EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected syste…
|
NVD-CWE-noinfo
|
CVE-2017-4988
|
2024-11-21 12:26 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248003
|
7.8 |
HIGH
Local
|
lenovo
|
xclarity_administrator
|
In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authent…
|
CWE-287
Improper Authentication
|
CVE-2017-3745
|
2024-11-21 12:26 |
2017-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248004
|
6.5 |
MEDIUM
Network
|
lenovo ibm
|
integrated_management_module_firmware
|
In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2017-3744
|
2024-11-21 12:26 |
2017-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248005
|
7.5 |
HIGH
Network
|
lenovo
|
toolscenter_dynamic_system_analysis advanced_settings_utility updatexpress_system_pack_installer
|
If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSP…
|
CWE-200
Information Exposure
|
CVE-2017-3743
|
2024-11-21 12:26 |
2017-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248006
|
7.3 |
HIGH
Local
|
emc
|
vnx2_firmware vnx1_firmware
|
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potent…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2017-4987
|
2024-11-21 12:26 |
2017-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248007
|
7.8 |
HIGH
Local
|
emc
|
vnx2_firmware vnx1_firmware
|
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization …
|
CWE-862
Missing Authorization
|
CVE-2017-4985
|
2024-11-21 12:26 |
2017-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248008
|
9.8 |
CRITICAL
Network
|
emc
|
vnx2_firmware vnx1_firmware
|
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a comm…
|
CWE-77
Command Injection
|
CVE-2017-4984
|
2024-11-21 12:26 |
2017-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248009
|
5.3 |
MEDIUM
Network
|
emc
|
secure_remote_services
|
EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
|
CWE-200
Information Exposure
|
CVE-2017-4986
|
2024-11-21 12:26 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248010
|
7.5 |
HIGH
Network
|
dell
|
bsafe_cert-c
|
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability.
|
CWE-295
Improper Certificate Validation
|
CVE-2017-4981
|
2024-11-21 12:26 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|