|
250611
|
6.5 |
MEDIUM
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. …
|
CWE-200
Information Exposure
|
CVE-2017-4922
|
2024-11-21 12:26 |
2017-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250612
|
8.8 |
HIGH
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issu…
|
NVD-CWE-noinfo
|
CVE-2017-4921
|
2024-11-21 12:26 |
2017-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250613
|
9.0 |
CRITICAL
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-4919
|
2024-11-21 12:26 |
2017-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250614
|
6.7 |
MEDIUM
Local
|
lenovo
|
bios
|
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to…
|
NVD-CWE-noinfo
|
CVE-2017-3754
|
2024-11-21 12:26 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250615
|
4.8 |
MEDIUM
Adjacent
|
lenovo
|
connect2
|
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for th…
|
CWE-200
Information Exposure
|
CVE-2017-3742
|
2024-11-21 12:26 |
2017-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250616
|
8.8 |
HIGH
Network
|
mcafee
|
advanced_threat_defense
|
Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI te…
|
NVD-CWE-noinfo
|
CVE-2017-4057
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250617
|
7.5 |
HIGH
Network
|
mcafee
|
advanced_threat_defense
|
Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD dete…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-4055
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250618
|
8.8 |
HIGH
Network
|
mcafee
|
advanced_threat_defense
|
Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted H…
|
CWE-77
Command Injection
|
CVE-2017-4054
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250619
|
9.8 |
CRITICAL
Network
|
mcafee
|
advanced_threat_defense
|
Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their c…
|
CWE-78
OS Command
|
CVE-2017-4053
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250620
|
9.8 |
CRITICAL
Network
|
mcafee
|
advanced_threat_defense
|
Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any con…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-4052
|
2024-11-21 12:26 |
2017-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|