CVE-2017-4000 to CVE-2017-4999

8 CVEs with public proof-of-concept exploits.

• CVE-2017-40111 PoCEmbedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote…
• CVE-2017-48981 PoCVMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading…
• CVE-2017-49014 PoCsThe drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds…
• CVE-2017-49051 PoCVMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG,…
• CVE-2017-49141 PoCVMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow…
• CVE-2017-49153 PoCsVMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful…
• CVE-2017-49161 PoCVMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation…
• CVE-2017-49712 PoCsAn issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator…