CVEs published January 10, 2017
16 CVEs were published on January 10, 2017: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…
- 1
- hpack
- 1
- priority
- 1
Medium, low and unrated 16
- CVE-2017-0002Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Micro
- CVE-2017-0003Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr
- CVE-2017-0004The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1
- CVE-2016-9247Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sF5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…
- CVE-2015-4591eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated u
- CVE-2015-4592eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticat
- CVE-2015-4593eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows
- CVE-2015-4594eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability.
- CVE-2016-6286The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers
- CVE-2016-6287The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even whe
- CVE-2016-6580A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer priority
- CVE-2016-6581A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of servhpack
- CVE-2016-6830The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment var
- CVE-2016-6831The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak
- CVE-2016-6837Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 al
- CVE-2016-10126Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and