CVEs published January 26, 2017
31 CVEs were published on January 26, 2017: 2 critical, 2 high.
- Published
- 31
- Critical
- 2
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco WebEx Meetings Server
- 4
- Aerospike Database Server
- 2
- Cisco Unified Communications Manager
- 2
- Aerospike
- 1
- Cisco ASR 5000 Software
- 1
- Cisco AsyncOS
- 1
- Cisco Hybrid Meeting Server
- 1
- Cisco IOS
- 1
- Cisco IOS and Cisco IOx
- 1
- Cisco Mobility Express 2800 and
- 1
Critical 2
- CVE-2016-9052An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.Aerospike
- CVE-2016-9054An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.Aerospike Database Server
High 2
- CVE-2016-8710An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library.Libbpg
- CVE-2016-9050An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.Aerospike Database Server
Medium, low and unrated 27
- CVE-2016-8225Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execLenovo Group Edge and Slim USB Keyboard Driver
- CVE-2016-8226The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.Lenovo Group System X M5, M6, and X6 BIOS
- CVE-2016-8227Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local Lenovo Group Transition application
- CVE-2016-10013Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emula
- CVE-2016-10024Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the inst
- CVE-2016-10025VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to
- CVE-2016-6908Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due
- CVE-2016-6911The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-
- CVE-2016-6912Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have
- CVE-2016-9317The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system
- CVE-2016-9932CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stac
- CVE-2016-9216An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remCisco ASR 5000 Software
- CVE-2016-9218A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRFCisco Hybrid Meeting Server
- CVE-2016-9220A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could Cisco Mobility Express 2800 and
- CVE-2016-9221A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access PCisco Mobility Express 2800 Series and 3800 Series Access P…
- CVE-2016-9222A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker Cisco NetFlow Generation Appliance
- CVE-2017-3794A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRFCisco WebEx Meetings Server
- CVE-2017-3795A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against aCisco WebEx Meetings Server
- CVE-2017-3796A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on otheCisco WebEx Meetings Server
- CVE-2017-3797A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of thCisco WebEx Meetings Server
- CVE-2017-3798A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager couldCisco Unified Communications Manager
- CVE-2017-3799A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirectionCisco WebEx Meeting Center T28.1
- CVE-2017-3800A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthentiCisco AsyncOS
- CVE-2017-3802A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XCisco Unified Communications Manager
- CVE-2017-3803A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attackCisco IOS
- CVE-2017-3804A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Cisco Nexus 5000, 6000,
- CVE-2017-3805A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker toCisco IOS and Cisco IOx