CVEs published February 3, 2017
44 CVEs were published on February 3, 2017: 0 critical, 0 high.
- Published
- 44
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 44
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco IOS XE 15.x
- 2
- EMC Documentum D2 EMC Documentum D2
- 2
- EMC Network Configuration Manager EMC Network Configuration…
- 2
- EMC RecoverPoint and EMC RecoverPoint for Virtual Machines…
- 2
- RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to
- 2
- Cisco AsyncOS 9.7.1-066
- 1
- Cisco Firepower 4100 Series Next-Generation Firewall and Ci…
- 1
- Cisco Firepower Management Center (FMC) 6.1.0
- 1
- Cisco Firepower System Software 5.x 6.x
- 1
- Cisco Firepower Threat Defense Software versions 6.1.x
- 1
Medium, low and unrated 44
- CVE-2015-4049Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated
- CVE-2016-10165The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial
- CVE-2016-6500Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls const
- CVE-2016-3183The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds re
- CVE-2016-4796Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of
- CVE-2016-4797Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial o
- CVE-2016-6188Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload
- CVE-2016-2317Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, relat
- CVE-2016-2318GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the
- CVE-2016-4352Integer overflow in the demuxer function in libmpdemux/demux_gif.c in Mplayer allows remote attackers to cause a denial of service (crash) v
- CVE-2016-4570The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack co
- CVE-2016-4571The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (sta
- CVE-2016-5115The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of
- CVE-2016-5241magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application c
- CVE-2016-6163The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-o
- CVE-2016-8568The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read)
- CVE-2016-8569The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc
- CVE-2016-9082Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference
- CVE-2016-9085Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
- CVE-2016-9108Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc.
- CVE-2016-9642JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.
- CVE-2016-0890EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive informatioEMC PowerPath Virtual (Management) Appliance EMC PowerPath…
- CVE-2016-0919EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scriRSA Web Threat Detection RSA Web Threat Detection
- CVE-2016-6648EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive informationEMC RecoverPoint and EMC RecoverPoint for Virtual Machines…
- CVE-2016-6649EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injeEMC RecoverPoint and EMC RecoverPoint for Virtual Machines…
- CVE-2016-8211EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMEMC Data Protection Advisor EMC Data Protection Advisor 6.1…
- CVE-2016-8212An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2.RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to
- CVE-2016-8216EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS)EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all ve…
- CVE-2016-8217EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability.RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to
- CVE-2016-9871EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by aEMC Isilon OneFS EMC Isilon OneFS 7.2.1.0 7.2.1.3, EMC Isil…
- CVE-2016-9872EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially beEMC Documentum D2 EMC Documentum D2
- CVE-2016-9873EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malEMC Documentum D2 EMC Documentum D2
- CVE-2017-2766EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum EMC Documentum eRoom EMC Documentum eRoom
- CVE-2017-2767EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.EMC Network Configuration Manager EMC Network Configuration…
- CVE-2017-2768EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.EMC Network Configuration Manager EMC Network Configuration…
- CVE-2017-3806A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security ApplCisco Firepower 4100 Series Next-Generation Firewall and Ci…
- CVE-2017-3809A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attackCisco Firepower Management Center (FMC) 6.1.0
- CVE-2017-3810A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirCisco Prime Service Catalog 10.0_R2_tanggula
- CVE-2017-3812A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches coCisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2
- CVE-2017-3814A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's abiCisco Firepower System Software 5.x 6.x
- CVE-2017-3818A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ECisco AsyncOS 9.7.1-066
- CVE-2017-3820A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco ICisco IOS XE 15.x
- CVE-2017-3822A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthentCisco Firepower Threat Defense Software versions 6.1.x
- CVE-2017-3824A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacCisco IOS XE 15.x