CVEs published February 2, 2017
15 CVEs were published on February 2, 2017: 0 critical, 0 high.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM Key Lifecycle Manager
- 4
- IBM AIX
- 1
- IBM Tivoli Components
- 1
Medium, low and unrated 15
- CVE-2016-5935IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate thIBM Tivoli Components
- CVE-2016-6095IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attacker to brute force acIBM Key Lifecycle Manager
- CVE-2016-6099IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users.IBM Key Lifecycle Manager
- CVE-2016-6103IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious IBM Key Lifecycle Manager
- CVE-2016-6116IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properlIBM Key Lifecycle Manager
- CVE-2017-1093IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.IBM AIX
- CVE-2016-6234The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (crash) via a cra
- CVE-2016-6235The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (segmentatio
- CVE-2016-6236The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-boun
- CVE-2016-6237The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds w
- CVE-2016-6238The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds read)
- CVE-2016-1566Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location share
- CVE-2017-5600The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging
- CVE-2017-5218A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3.
- CVE-2017-5219An issue was discovered in SageCRM 7.x before 7.3 SP3.