# CVEs published 2016-12-17

9 CVEs were published on December 17, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2016-7454](https://cve.now/CVE-2016-7454.md): CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST all (no CVSS)
- [CVE-2016-9158](https://cve.now/CVE-2016-9158.md): A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. (CVSS 7.5, Siemens AG SIMATIC S7-300 CPU family · Siemens AG SIMATI… +3)
- [CVE-2016-9159](https://cve.now/CVE-2016-9159.md): A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. (CVSS 5.9, Siemens AG SIMATIC S7-300 CPU family · Siemens AG SIMATI… +4)
- [CVE-2016-9160](https://cve.now/CVE-2016-9160.md): A vulnerability in SIEMENS SIMATIC WinCC (All versions \< SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions \< SIMATIC PCS 7 V8.0 SP (no CVSS, SIEMENS SIMATIC WinCC (All versions \< SIMATIC WinCC V7.2) a…)
- [CVE-2016-9949](https://cve.now/CVE-2016-9949.md): An issue was discovered in Apport before 2.20.4. (no CVSS)
- [CVE-2016-9950](https://cve.now/CVE-2016-9950.md): An issue was discovered in Apport before 2.20.4. (no CVSS)
- [CVE-2016-9951](https://cve.now/CVE-2016-9951.md): An issue was discovered in Apport before 2.20.4. (no CVSS)
- [CVE-2016-9997](https://cve.now/CVE-2016-9997.md): SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce\_statut.php involving the \`$id\` parameter, as dem (no CVSS)
- [CVE-2016-9998](https://cve.now/CVE-2016-9998.md): SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info\_plugin.php involving the \`$plugin\` parameter, as (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.