Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2016-8221 Permissions, Privileges, and Access Controls vulnerability in Lenovo Xclarity Administrator
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.
local
high complexity
lenovo CWE-264
7.0
2017-01-12 CVE-2016-7791 Improper Input Validation vulnerability in Exponentcms Exponent CMS 2.3.9
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php.
network
low complexity
exponentcms CWE-20
critical
9.8
2017-01-12 CVE-2016-7790 Improper Input Validation vulnerability in Exponentcms Exponent CMS 2.3.9
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php.
network
low complexity
exponentcms CWE-20
critical
9.8
2017-01-12 CVE-2017-0404 Unspecified vulnerability in Linux Kernel 3.10/3.18
An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux
7.0
2017-01-12 CVE-2017-0403 Unspecified vulnerability in Linux Kernel 3.10/3.18
An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux
7.0
2017-01-12 CVE-2017-0402 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0401 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0400 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0399 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0397 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5