# CVEs published 2016-02-17 27 CVEs were published on February 17, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-1333](https://cve.now/CVE-2016-1333.md): Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (devic (no CVSS) - [CVE-2016-1334](https://cve.now/CVE-2016-1334.md): Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POS (no CVSS) - [CVE-2016-2398](https://cve.now/CVE-2016-2398.md): Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to d (no CVSS) - [CVE-2013-7447](https://cve.now/CVE-2013-7447.md): Integer overflow in the gdk\_cairo\_set\_source\_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gamb (no CVSS) - [CVE-2016-0766](https://cve.now/CVE-2016-0766.md): PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict ac (no CVSS) - [CVE-2016-0773](https://cve.now/CVE-2016-0773.md): PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to ca (no CVSS) - [CVE-2016-2046](https://cve.now/CVE-2016-2046.md): Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web s (no CVSS) - [CVE-2016-2071](https://cve.now/CVE-2016-2071.md): Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and (no CVSS) - [CVE-2016-2072](https://cve.now/CVE-2016-2072.md): The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.3 (no CVSS) - [CVE-2016-2396](https://cve.now/CVE-2016-2396.md): The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remo (no CVSS) - [CVE-2016-2397](https://cve.now/CVE-2016-2397.md): The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers (no CVSS) - [CVE-2015-7795](https://cve.now/CVE-2015-7795.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2015-7796](https://cve.now/CVE-2015-7796.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2015-7797](https://cve.now/CVE-2015-7797.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2015-7798](https://cve.now/CVE-2015-7798.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2015-8483](https://cve.now/CVE-2015-8483.md): Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and cond (no CVSS) - [CVE-2015-8484](https://cve.now/CVE-2015-8484.md): Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vector (no CVSS) - [CVE-2015-8485](https://cve.now/CVE-2015-8485.md): Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting title (no CVSS) - [CVE-2015-8486](https://cve.now/CVE-2015-8486.md): Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles (no CVSS) - [CVE-2015-8487](https://cve.now/CVE-2015-8487.md): Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE (no CVSS) - [CVE-2015-8488](https://cve.now/CVE-2015-8488.md): Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487. (no CVSS) - [CVE-2015-8489](https://cve.now/CVE-2015-8489.md): customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) (no CVSS) - [CVE-2016-1149](https://cve.now/CVE-2016-1149.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2016-1150](https://cve.now/CVE-2016-1150.md): Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2016-1151](https://cve.now/CVE-2016-1151.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authen (no CVSS) - [CVE-2016-1152](https://cve.now/CVE-2016-1152.md): Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, (no CVSS) - [CVE-2016-1153](https://cve.now/CVE-2016-1153.md): customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a di (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-02-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.