# CVEs published 2017-06-03 9 CVEs were published on June 3, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-9416](https://cve.now/CVE-2017-9416.md): Directory traversal vulnerability in tools.file\_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fi (no CVSS) - [CVE-2017-9417](https://cve.now/CVE-2017-9417.md): Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue. (no CVSS) - [CVE-2012-6705](https://cve.now/CVE-2012-6705.md): Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field. (no CVSS) - [CVE-2016-8228](https://cve.now/CVE-2016-8228.md): In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. (no CVSS, Lenovo Group Service Bridge) - [CVE-2016-8229](https://cve.now/CVE-2016-8229.md): A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DH (no CVSS, Lenovo Group Service Bridge) - [CVE-2016-8230](https://cve.now/CVE-2016-8230.md): In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model a (no CVSS, Lenovo Group Service Bridge) - [CVE-2016-8231](https://cve.now/CVE-2016-8231.md): In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploite (no CVSS, Lenovo Group Service Bridge) - [CVE-2017-3740](https://cve.now/CVE-2017-3740.md): In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controll (no CVSS, Lenovo Group Active Protection System) - [CVE-2017-3741](https://cve.now/CVE-2017-3741.md): In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from funct (no CVSS, Lenovo Group Power Management Driver) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-06-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.