|
250591
|
5.4 |
MEDIUM
Network
|
vmware
|
vcenter_server
|
VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which …
|
CWE-79
Cross-site Scripting
|
CVE-2017-4926
|
2024-11-21 12:26 |
2017-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250592
|
5.5 |
MEDIUM
Local
|
vmware
|
esxi workstation workstation_pro fusion
|
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-4925
|
2024-11-21 12:26 |
2017-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250593
|
8.8 |
HIGH
Local
|
vmware
|
fusion esxi workstation_pro
|
VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may a…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-4924
|
2024-11-21 12:26 |
2017-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250594
|
5.9 |
MEDIUM
Network
|
mcafee
|
livesafe
|
A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registr…
|
CWE-20
Improper Input Validation
|
CVE-2017-3898
|
2024-11-21 12:26 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250595
|
9.8 |
CRITICAL
Network
|
mcafee
|
livesafe security_scan_plus
|
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 all…
|
CWE-94
Code Injection
|
CVE-2017-3897
|
2024-11-21 12:26 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250596
|
7.8 |
HIGH
Local
|
emc
|
elan_touchpad_driver
|
An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with…
|
CWE-428
Unquoted Search Path or Element
|
CVE-2017-3757
|
2024-11-21 12:26 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250597
|
7.8 |
HIGH
Local
|
lenovo
|
thinkpad_usb_3.0_ethernet_adapter_driver
|
ThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to contain a privilege escalation vulnerability that could allow a local user to execute arbitrary code …
|
NVD-CWE-noinfo
|
CVE-2017-3746
|
2024-11-21 12:26 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250598
|
5.3 |
MEDIUM
Network
|
openssl debian
|
openssl debian_linux
|
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been pres…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-3735
|
2024-11-21 12:26 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250599
|
7.8 |
HIGH
Local
|
lenovo
|
thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…
|
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with …
|
NVD-CWE-noinfo
|
CVE-2017-3756
|
2024-11-21 12:26 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250600
|
6.8 |
MEDIUM
Physics
|
lenovo
|
ideacentre_300-20ish_firmware ideacentre_300s-11ish_firmware ideacentre_510s-08ish_firmware ideacentre_700_firmware 63_firmware h50-30g_firmware m4500_firmware m4500_id_firmware<…
|
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with ad…
|
CWE-94
Code Injection
|
CVE-2017-3753
|
2024-11-21 12:26 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|