CVEs published December 21, 2016
3 CVEs were published on December 21, 2016: 0 critical, 0 high.
- Published
- 3
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- python-docx
- 1
Medium, low and unrated 3
- CVE-2016-2349Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous pa
- CVE-2016-7172NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user.
- CVE-2016-5851python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.python-docx