|
248631
|
4.4 |
MEDIUM
Network
|
oracle debian
|
mysql debian_linux
|
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. D…
|
NVD-CWE-noinfo
|
CVE-2017-3648
|
2024-11-21 12:26 |
2017-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248632
|
4.4 |
MEDIUM
Network
|
oracle
|
mysql
|
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to explo…
|
NVD-CWE-noinfo
|
CVE-2017-3647
|
2024-11-21 12:26 |
2017-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248633
|
9.8 |
CRITICAL
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-ba…
|
CWE-200 CWE-522
Information Exposure Insufficiently Protected Credentials
|
CVE-2017-4923
|
2024-11-21 12:26 |
2017-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248634
|
6.5 |
MEDIUM
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. …
|
CWE-200
Information Exposure
|
CVE-2017-4922
|
2024-11-21 12:26 |
2017-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248635
|
8.8 |
HIGH
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issu…
|
NVD-CWE-noinfo
|
CVE-2017-4921
|
2024-11-21 12:26 |
2017-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248636
|
9.0 |
CRITICAL
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-4919
|
2024-11-21 12:26 |
2017-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248637
|
6.7 |
MEDIUM
Local
|
lenovo
|
bios
|
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to…
|
NVD-CWE-noinfo
|
CVE-2017-3754
|
2024-11-21 12:26 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248638
|
4.8 |
MEDIUM
Adjacent
|
lenovo
|
connect2
|
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for th…
|
CWE-200
Information Exposure
|
CVE-2017-3742
|
2024-11-21 12:26 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248639
|
8.8 |
HIGH
Network
|
mcafee
|
advanced_threat_defense
|
Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI te…
|
NVD-CWE-noinfo
|
CVE-2017-4057
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248640
|
7.5 |
HIGH
Network
|
mcafee
|
advanced_threat_defense
|
Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD dete…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-4055
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|