# CVEs published 2017-02-08

86 CVEs were published on February 8, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1976](https://cve.now/CVE-2015-1976.md): IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the… (no CVSS, IBM Directory Server)
- [CVE-2015-7418](https://cve.now/CVE-2015-7418.md): IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being… (no CVSS, IBM WebSphere DataPower XC10 Appliance)
- [CVE-2015-7493](https://cve.now/CVE-2015-7493.md): IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes… (no CVSS, IBM InfoSphere Information Server)
- [CVE-2015-7494](https://cve.now/CVE-2015-7494.md): A vulnerability has been identified in IBM Cloud Orchestrator services/\[action\]/launch API. (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0202](https://cve.now/CVE-2016-0202.md): A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud… (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0203](https://cve.now/CVE-2016-0203.md): A vulnerability has been identified in the IBM Cloud Orchestrator task API. (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0206](https://cve.now/CVE-2016-0206.md): IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a… (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0210](https://cve.now/CVE-2016-0210.md): IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2016-0214](https://cve.now/CVE-2016-0214.md): IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. (no CVSS, IBM BigFix Platform)
- [CVE-2016-0305](https://cve.now/CVE-2016-0305.md): IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. (no CVSS, IBM Connections)
- [CVE-2016-0307](https://cve.now/CVE-2016-0307.md): IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. (no CVSS, IBM Connections)
- [CVE-2016-0308](https://cve.now/CVE-2016-0308.md): IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate… (no CVSS, IBM Connections)
- [CVE-2016-0310](https://cve.now/CVE-2016-0310.md): IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. (no CVSS, IBM Connections)
- [CVE-2016-5900](https://cve.now/CVE-2016-5900.md): IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by… (no CVSS, IBM Tealeaf Customer Experience)
- [CVE-2016-5902](https://cve.now/CVE-2016-5902.md): IBM Maximo Asset Management is vulnerable to cross-site scripting. (no CVSS, IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.1…)
- [CVE-2016-5918](https://cve.now/CVE-2016-5918.md): IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the… (no CVSS, IBM Tivoli Storage Manager HSM for Windows)
- [CVE-2016-5934](https://cve.now/CVE-2016-5934.md): IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. (no CVSS, IBM Tivoli Storage Manager FastBack)
- [CVE-2016-8954](https://cve.now/CVE-2016-8954.md): IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. (no CVSS, IBM DashDB Local)
- [CVE-2016-9005](https://cve.now/CVE-2016-9005.md): IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's… (no CVSS, IBM System Storage)
- [CVE-2016-9686](https://cve.now/CVE-2016-9686.md): The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. (no CVSS, Puppet Enterprise)
- [CVE-2015-5013](https://cve.now/CVE-2015-5013.md): The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated… (no CVSS, IBM Access Manager)
- [CVE-2016-2866](https://cve.now/CVE-2016-2866.md): An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-6032](https://cve.now/CVE-2016-6032.md): IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-9748](https://cve.now/CVE-2016-9748.md): IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further… (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-1127](https://cve.now/CVE-2017-1127.md): IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-1128](https://cve.now/CVE-2017-1128.md): IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-2765](https://cve.now/CVE-2017-2765.md): EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass… (no CVSS, EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2…)
- [CVE-2016-0270](https://cve.now/CVE-2016-0270.md): IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce… (no CVSS)
- [CVE-2016-10212](https://cve.now/CVE-2016-10212.md): Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof… (no CVSS)
- [CVE-2016-10213](https://cve.now/CVE-2016-10213.md): A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote… (no CVSS)
- [CVE-2016-8492](https://cve.now/CVE-2016-8492.md): The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the… (no CVSS, Fortinet FortiGate)
- [CVE-2017-5933](https://cve.now/CVE-2017-5933.md): Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly… (no CVSS)
- [CVE-2016-8414](https://cve.now/CVE-2016-8414.md): An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious… (no CVSS, Google Android)
- [CVE-2016-8418](https://cve.now/CVE-2016-8418.md): A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2016-8419](https://cve.now/CVE-2016-8419.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8420](https://cve.now/CVE-2016-8420.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8421](https://cve.now/CVE-2016-8421.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8476](https://cve.now/CVE-2016-8476.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8480](https://cve.now/CVE-2016-8480.md): An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious… (no CVSS, Google Android)
- [CVE-2016-8481](https://cve.now/CVE-2016-8481.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0405](https://cve.now/CVE-2017-0405.md): A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0406](https://cve.now/CVE-2017-0406.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0407](https://cve.now/CVE-2017-0407.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0408](https://cve.now/CVE-2017-0408.md): A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the… (no CVSS, Google Android)
- [CVE-2017-0409](https://cve.now/CVE-2017-0409.md): A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0410](https://cve.now/CVE-2017-0410.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within… (no CVSS, Google Android)
- [CVE-2017-0411](https://cve.now/CVE-2017-0411.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within… (no CVSS, Google Android)
- [CVE-2017-0412](https://cve.now/CVE-2017-0412.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within… (no CVSS, Google Android)
- [CVE-2017-0413](https://cve.now/CVE-2017-0413.md): An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system… (no CVSS, Google Android)
- [CVE-2017-0414](https://cve.now/CVE-2017-0414.md): An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system… (no CVSS, Google Android)
- [CVE-2017-0415](https://cve.now/CVE-2017-0415.md): An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0416](https://cve.now/CVE-2017-0416.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0417](https://cve.now/CVE-2017-0417.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0418](https://cve.now/CVE-2017-0418.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0419](https://cve.now/CVE-2017-0419.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0420](https://cve.now/CVE-2017-0420.md): An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections… (no CVSS, Google Android)
- [CVE-2017-0421](https://cve.now/CVE-2017-0421.md): An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system… (no CVSS, Google Android)
- [CVE-2017-0422](https://cve.now/CVE-2017-0422.md): A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device… (no CVSS, Google Android)
- [CVE-2017-0423](https://cve.now/CVE-2017-0423.md): An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. (no CVSS, Google Android)
- [CVE-2017-0424](https://cve.now/CVE-2017-0424.md): An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data… (no CVSS, Google Android)
- [CVE-2017-0425](https://cve.now/CVE-2017-0425.md): An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission… (no CVSS, Google Android)
- [CVE-2017-0426](https://cve.now/CVE-2017-0426.md): An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its… (no CVSS, Google Android)
- [CVE-2017-0427](https://cve.now/CVE-2017-0427.md): An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0428](https://cve.now/CVE-2017-0428.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0429](https://cve.now/CVE-2017-0429.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0430](https://cve.now/CVE-2017-0430.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0432](https://cve.now/CVE-2017-0432.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within… (no CVSS, Google Android)
- [CVE-2017-0433](https://cve.now/CVE-2017-0433.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0434](https://cve.now/CVE-2017-0434.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0435](https://cve.now/CVE-2017-0435.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0436](https://cve.now/CVE-2017-0436.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0437](https://cve.now/CVE-2017-0437.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0438](https://cve.now/CVE-2017-0438.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0439](https://cve.now/CVE-2017-0439.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0440](https://cve.now/CVE-2017-0440.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0441](https://cve.now/CVE-2017-0441.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0442](https://cve.now/CVE-2017-0442.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0443](https://cve.now/CVE-2017-0443.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0444](https://cve.now/CVE-2017-0444.md): An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0445](https://cve.now/CVE-2017-0445.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0446](https://cve.now/CVE-2017-0446.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0447](https://cve.now/CVE-2017-0447.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0448](https://cve.now/CVE-2017-0448.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0449](https://cve.now/CVE-2017-0449.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0450](https://cve.now/CVE-2017-0450.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0451](https://cve.now/CVE-2017-0451.md): An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.