Skip to content
OpenAdvisories

Archive

3 June 2017

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —
    CVE-2017-9416 Scanner template

    Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to re…

  • Unscored —
    CVE-2017-9417 Public exploit EPSS 66%

    Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpw…

  • Unscored —

    Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.

  • Unscored —

    A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker …

  • Unscored —

    In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrat…

  • Unscored —

    In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certific…

  • Unscored —

    In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, mac…

  • Unscored —

    In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the …

  • Unscored —

    In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the syste…