# CVEs published 2017-01-02

4 CVEs were published on January 2, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-5005](https://cve.now/CVE-2017-5005.md): Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro (no CVSS)
- [CVE-2016-10099](https://cve.now/CVE-2016-10099.md): Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of archives), potentiall (no CVSS)
- [CVE-2016-10100](https://cve.now/CVE-2016-10100.md): Borg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed during manifest recovery, potentially allowi (no CVSS)
- [CVE-2016-10097](https://cve.now/CVE-2016-10097.md): XML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.