# CVEs published 2017-01-03

5 CVEs were published on January 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2016-5024](https://cve.now/CVE-2016-5024.md): Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRul (no CVSS, F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…)
- [CVE-2016-10105](https://cve.now/CVE-2016-10105.md): admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. (no CVSS)
- [CVE-2016-10106](https://cve.now/CVE-2016-10106.md): Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware befor (no CVSS)
- [CVE-2016-10107](https://cve.now/CVE-2016-10107.md): Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie hea (no CVSS)
- [CVE-2016-10108](https://cve.now/CVE-2016-10108.md): Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google\_analytics.php URL via a modi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.