CVEs published January 26, 2017
31 CVEs were published on January 26, 2017: 2 critical, 2 high. Browse them by severity, product and exploitation status.
- Published
- 31
- Critical
- 2
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco WebEx Meetings Server
- 4
- Aerospike Database Server
- 2
- Cisco Unified Communications Manager
- 2
- Aerospike
- 1
- Cisco ASR 5000 Software
- 1
- Cisco AsyncOS
- 1
- Cisco Hybrid Meeting Server
- 1
- Cisco IOS
- 1
- Cisco IOS and Cisco IOx
- 1
- Cisco Mobility Express 2800 and
- 1
Critical 2
- CVE-2016-9052An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.Aerospike
- CVE-2016-9054An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.Aerospike Database Server
High 2
- CVE-2016-8710An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library.Libbpg
- CVE-2016-9050An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.Aerospike Database Server
Medium, low and unrated 27
- CVE-2016-8225Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to…Lenovo Group Edge and Slim USB Keyboard Driver
- CVE-2016-8226The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.Lenovo Group System X M5, M6, and X6 BIOS
- CVE-2016-8227Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows…Lenovo Group Transition application
- CVE-2016-10013Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during…
- CVE-2016-10024Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the…
- CVE-2016-10025VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users…
- CVE-2016-6908Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android…
- CVE-2016-6911The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service…
- CVE-2016-6912Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to…
- CVE-2016-9317The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service…
- CVE-2016-9932CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host…
- CVE-2016-9216An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated…Cisco ASR 5000 Software
- CVE-2016-9218A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…Cisco Hybrid Meeting Server
- CVE-2016-9220A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs)…Cisco Mobility Express 2800 and
- CVE-2016-9221A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access…Cisco Mobility Express 2800 Series and 3800 Series Access P…
- CVE-2016-9222A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote…Cisco NetFlow Generation Appliance
- CVE-2017-3794A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…Cisco WebEx Meetings Server
- CVE-2017-3795A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against…Cisco WebEx Meetings Server
- CVE-2017-3796A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on…Cisco WebEx Meetings Server
- CVE-2017-3797A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of…Cisco WebEx Meetings Server
- CVE-2017-3798A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager…Cisco Unified Communications Manager
- CVE-2017-3799A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site…Cisco WebEx Meeting Center T28.1
- CVE-2017-3800A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an…Cisco AsyncOS
- CVE-2017-3802A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting…Cisco Unified Communications Manager
- CVE-2017-3803A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent…Cisco IOS
Show all 27 entriesShow fewer entries
- CVE-2017-3804A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000…Cisco Nexus 5000, 6000,
- CVE-2017-3805A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker…Cisco IOS and Cisco IOx