CVEs published June 3, 2017
9 CVEs were published on June 3, 2017: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Lenovo Group Service Bridge
- 4
- Lenovo Group Active Protection System
- 1
- Lenovo Group Power Management Driver
- 1
Medium, low and unrated 9
- CVE-2017-9416Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fi
- CVE-2017-9417Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
- CVE-2012-6705Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.
- CVE-2016-8228In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.Lenovo Group Service Bridge
- CVE-2016-8229A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHLenovo Group Service Bridge
- CVE-2016-8230In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model aLenovo Group Service Bridge
- CVE-2016-8231In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploiteLenovo Group Service Bridge
- CVE-2017-3740In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controllLenovo Group Active Protection System
- CVE-2017-3741In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functLenovo Group Power Management Driver