Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-10 CVE-2017-3751 Unquoted Search Path or Element vulnerability in Lenovo Thinkpad Compact USB Keyboard Driver
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0.
local
low complexity
lenovo CWE-428
7.8
2017-08-09 CVE-2017-9799 Unspecified vulnerability in Apache Storm
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user.
network
low complexity
apache
8.8
2017-08-09 CVE-2017-3752 Improper Input Validation vulnerability in multiple products
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches.
high complexity
ibm lenovo CWE-20
8.2
2017-08-09 CVE-2017-12756 Command Injection vulnerability in Extplorer
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.
network
low complexity
extplorer CWE-77
7.2
2017-08-09 CVE-2017-0750 Out-of-bounds Write vulnerability in Google Android
A elevation of privilege vulnerability in the Upstream Linux file system.
local
low complexity
google CWE-787
7.8
2017-08-09 CVE-2017-0749 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the Upstream Linux linux kernel.
local
low complexity
google
7.8
2017-08-09 CVE-2017-0747 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the Qualcomm proprietary component.
local
low complexity
google
7.8
2017-08-09 CVE-2017-0746 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the Qualcomm ipa driver.
local
low complexity
google
7.8
2017-08-09 CVE-2017-0745 Improper Initialization vulnerability in Google Android
A remote code execution vulnerability in the Android media framework (avc decoder).
local
low complexity
google CWE-665
7.8
2017-08-09 CVE-2017-0742 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek video driver.
local
low complexity
google
7.8